<!--
   Licensed to the Apache Software Foundation (ASF) under one or more
   contributor license agreements.  See the NOTICE file distributed with
   this work for additional information regarding copyright ownership.
   The ASF licenses this file to You under the Apache License, Version 2.0
   (the "License"); you may not use this file except in compliance with
   the License.  You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

   Unless required by applicable law or agreed to in writing, software
   distributed under the License is distributed on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-->

                          Apache Commons-FileUpload
                                Version 1.3
                               Release Notes


INTRODUCTION
============

This is a maintenance release, new projects are encouraged to
use this release of FileUpload.
There is no urgency for existing projects to upgrade.

IMPORTANT NOTES
================

 * SECURITY - CVE-2013-0248, see http://seclists.org/fulldisclosure/2013/Mar/76

DEPENDENCIES
=============

FileUpload 1.3 users should upgrade to the recommended dependency set below
where possible.

The Recommended Dependency Set for FileUpload 1.3 is:
   Apache Commons-IO 2.2

Sub-task
=============

 * [FILEUPLOAD-216] - Update the project tree dirs according to default Maven conventions
 * [FILEUPLOAD-217] - drop JDK1.3 support and update to Java5
 * [FILEUPLOAD-218] - Update version in POM
 * [FILEUPLOAD-219] - upgrade tests to JUnit 4
 * [FILEUPLOAD-220] - replace package.html with package-info.java
 * [FILEUPLOAD-221] - FileItemHeadersImpl can now use LinkedHashMap
 * [FILEUPLOAD-222] - Mark @deprecated classes/methods with @Deprecated annotation
 * [FILEUPLOAD-233] - Base64Decoder doesn't correctly implement RFC 4648

Bug
=============

 * [FILEUPLOAD-143] - "Stream ended unexpectedly" when posting from a Flash client
 * [FILEUPLOAD-173] - Manifest for OSGi has invalid syntax
 * [FILEUPLOAD-183] - commons-io dependency does not get loaded by maven if only dependency to commons-fileupload is specified
 * [FILEUPLOAD-185] - http://commons.apache.org/fileupload/index.html is out of date
 * [FILEUPLOAD-186] - http://commons.apache.org/fileupload/index.html should not mention nightly builds
 * [FILEUPLOAD-189] - DiskFileItemFactory use of FileCleaningTracker is documented or coded wrong
 * [FILEUPLOAD-195] - Error reading the file size larger than 2 gb
 * [FILEUPLOAD-197] - ServletFileUpload isMultipartContent method does not support HTTP PUT
 * [FILEUPLOAD-199] - Uploads have unexpected results for files with non-ASCII names - support RFC2047
 * [FILEUPLOAD-202] - org.apache.commons.fileupload.FileUploadBase$IOFileUploadException: Processing of multipart/form-data request failed. Stream ended unexpectedly
 * [FILEUPLOAD-204] - FileItem.getHeaders() returns always null.
 * [FILEUPLOAD-212] - Insecure request size checking
 * [FILEUPLOAD-214] - ServletFileUpload only accepts POST requests
 * [FILEUPLOAD-228] - (Servlet|Portlet)RequestContext#contentLength() must return request.getContentLength() if Content-length header is not available
 * [FILEUPLOAD-229] - toLowerCase() is Locale-dependent; should use toLowerCase(Locale.ENGLISH) instead
 * [FILEUPLOAD-232] - There are no unit tests for the new utils.mime classes

Improvement
=============

 * [FILEUPLOAD-182] - Documentation: add simple HTML form example to fileupload user guide
 * [FILEUPLOAD-207] - enhance file read/write performance
 * [FILEUPLOAD-209] - Add Support for Generic Types
 * [FILEUPLOAD-210] - Process HTTP Requests Into Maps
 * [FILEUPLOAD-223] - Update commons-io dependency to latest version that supports JDK1.5
 * [FILEUPLOAD-224] - Avoid string concatenations while parsing headers, use buffers instead
 * [FILEUPLOAD-225] - Replace java.rmi.server.UID() with java.util.UUID
 * [FILEUPLOAD-226] - DiskFileItem.counter could be converted to AtomicInteger (or AtomicLong?)
 * [FILEUPLOAD-227] - Private immutable fields which could be final

Task
=============

 * [FILEUPLOAD-201] - Update to JDK 1.5 and bump IO dependency to 2.0.1
 * [FILEUPLOAD-215] - version 1.3 improvement tasks

OTHER NOTES
============

 * This is the first version of Apache Commons FileUpload which requires Java5