From 4d782668c34103bfe6dd97a9880a4fa80637a4f5 Mon Sep 17 00:00:00 2001 From: thc202 Date: Tue, 23 Sep 2025 16:41:13 +0100 Subject: [PATCH] Guard against multipart parsing errors Catch exception when parsing the multipart content to not break other parts of the codebase (e.g. Sites tree, parameters extraction). Signed-off-by: thc202 --- .../core/scanner/VariantMultipartFormParameters.java | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/zap/src/main/java/org/parosproxy/paros/core/scanner/VariantMultipartFormParameters.java b/zap/src/main/java/org/parosproxy/paros/core/scanner/VariantMultipartFormParameters.java index fa40d636811..24ea3129f80 100644 --- a/zap/src/main/java/org/parosproxy/paros/core/scanner/VariantMultipartFormParameters.java +++ b/zap/src/main/java/org/parosproxy/paros/core/scanner/VariantMultipartFormParameters.java @@ -78,6 +78,14 @@ public void setMessage(HttpMessage msg) { return; } + try { + parseImpl(msg, contentType); + } catch (Exception e) { + LOGGER.error("An error occurred while parsing multipart content:", e); + } + } + + private void parseImpl(HttpMessage msg, String contentType) { ArrayList extractedParameters = new ArrayList<>(); int position = 0; int offset = 0;