Uploaded image for project: 'Confluence Server and Data Center'
  1. Confluence Server and Data Center
  2. CONFSERVER-21057

Excel file with incorrect suffix can cause OutOfMemory errors

    XMLWordPrintable

    Details

      Description

      From CONF-17292:

      One cause of this problem is using the wrong suffix for Office 2007-style spreadsheets, which are normally saved with a .xlsx suffix. If the file was uploaded using a .xls suffix, Confluence will give it the old Excel spreadsheet MIME type application/vnd.ms-excel.

      You can see that this has happened if you use the

      {viewxls}

      parameters to limit the number of rows and columns displayed. Since it bypasses the code that incorrectly interprets arbitrary XML text as row and column counts, it will not cause Confluence to crash, but you will see that all of the cells are filled with XML and Javascript-like code instead of the expected values.

      To correctly interpret these files, the file must have the proper MIME-type, which is application/vnd.openxmlformats-officedocument.spreadsheetml.sheet.

      Because of the numerous occasions on which these files can be misnamed, and the possibility of crashing an entire wiki, I'd say this is a major problem. At a minimum, making the attachment upload process more persnickety would help a lot.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              rackley RyanA
              Reporter:
              mhrynczak Mark Hrynczak (Inactive)
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: