fix igniterealtime#29: Update to HTTP File Upload Component to version 1.4.0

Author: guusdk

changelog.html

@@ -43,6 +43,15 @@ <h1>HTTP File Upload Plugin Changelog</h1>
 
 <p><b>1.1.4</b> -- (tbd)</p>
 <ul>
+    <li>Updated to HttpFileUploadComponent v1.4.0, which resolves:</li>
+    <ul>
+        <li>Updated Guava library to 30.0-jre to address known vulnerabilities with earlier versions.</li>
+        <li>Improve content-type detection of uploaded content.</li>
+        <li><a href="https://github.com/guusdk/httpfileuploadcomponent/issues/23">Issue #31:</a> Add new webprotocol option to make the previously hardcoded http protocol configurable.</li>
+        <li><a href="https://github.com/guusdk/httpfileuploadcomponent/issues/23">Issue #33:</a> Add new wildcardCORS option that adds CORS headers to relax access restrictions imposed by browsers.</li>
+        <li><a href="https://github.com/guusdk/httpfileuploadcomponent/issues/23">Issue #23:</a> Replace UUID with something more secure.</li>
+    </ul>
+
     <li>Updated to HttpFileUploadComponent v1.3.0, which resolves:</li>
     <ul>
         <li><a href="https://github.com/guusdk/httpfileuploadcomponent/issues/23">Issue #23:</a> Replace UUID with something more secure.</li>

plugin.xml

@@ -5,6 +5,6 @@
     <description>Allows clients to share files, as described in the XEP-0363 'HTTP File Upload' specification.</description>
     <author>Guus der Kinderen</author>
     <version>${project.version}</version>
-    <date>6/9/2019</date>
+    <date>11/04/2021</date>
     <minServerVersion>4.1.0</minServerVersion>
 </plugin>

pom.xml

@@ -61,7 +61,7 @@
         <dependency>
             <groupId>nl.goodbytes.xmpp.xep</groupId>
             <artifactId>httpfileuploadcomponent</artifactId>
-            <version>1.3.0</version>
+            <version>1.4.0</version>
         </dependency>
     </dependencies>
 </project>

readme.html

@@ -74,6 +74,15 @@ <h2>Installation</h2>
 
 <h2>Configuration</h2>
 
+<p>
+    By default, the plugin will store all uploaded files in a temporary directory that is provided by the Operating System.
+    This directory is configured to be deleted, after Openfire quits. Some Operating Systems are known to periodically
+    purge these temporary directories, which is another potential source of data loss. This plugin can be configured to
+    use any other directory for data storage, by providing the path for that directory in the property <samp>plugin.httpfileupload.fileRepo</samp>.
+    Note that the directory is expected to exist (this plugin will not attempt to create it if it is missing). Be sure
+    that the process owner of the Openfire process has enough permissions to read and write in that directory.
+</p>
+
 <p>
     To configure the maximum allowable file size to be uploaded by clients, the property
     <samp>plugin.httpfileupload.maxFileSize</samp> can be set to a value in bytes. If not set, a default value is used. To

src/java/org/igniterealtime/openfire/plugins/httpfileupload/HttpFileUploadPlugin.java

@@ -82,7 +82,7 @@ public void initializePlugin( PluginManager manager, File pluginDirectory )
 
             component = new Component( XMPPServer.getInstance().getServerInfo().getXMPPDomain());
 
-            // Add the Webchat sources to the same context as the one that's providing the BOSH interface.
+            // Add the webapp to the same context as the one that's providing the BOSH interface.
             context = new WebAppContext( null, pluginDirectory.getPath() + File.separator + "classes", "/httpfileupload" );
             context.setClassLoader( this.getClass().getClassLoader() );