﻿id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
15879	"multipart/form-data filename="""" not handled as file"	j@…	Hridesh MG	"Django does not parse file uploads with empty filename as file objects in multipart/form-data requests.
This happens currently if you try to upload a Blob in Firefox 4 (https://bugzilla.mozilla.org/show_bug.cgi?id=649150)
Firefox sends this:
{{{
Content-Disposition: form-data; name=""fieldname""; filename=""""
Content-Type: content/type
DATA
}}}

Reading the related RFCs there is no mention that filename="""" is not allowed and the existence of the filename parameter should be enough to treat it as a file.
looking at django/http/multipartparser.py
165ff
{{{
                    file_name = disposition.get('filename')
                    if not file_name:
                        continue
}}}
this would need to set a default filename instead of bailing out
(i.e. if file_name == '': file_name = 'data.bin)

590:
{{{
            if params.get('filename'):
}}}
this would need to check
{{{
if 'filename' in params:
}}}"	Bug	assigned	File uploads/storage	1.3	Normal				Accepted	1	0	0	1	0	0
