Simple Captcha doesn't work with mutipart/form-data forms

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE, 7.0.0 M3
• Fix Version/s: 6.2.4 CE GA5, 6.2.X EE, 7.0.0 M3
• Component/s: Security Vulnerability
• Labels:
  • liferay-fixpack-portal-49-6210
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Story Points: 11
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal/pull/22703

Steps to reproduce:

1. In current master (7.0.x) deploy the attached portlet (testcaptcha-14.0-SNAPSHOT.war) that has the next form in the view.jsp:

<portlet:actionURL var="actionURL">
</portlet:actionURL>

<aui:form  action="<%= actionURL %>" method="post" name="fm1" enctype="multipart/form-data">

	<liferay-ui:error exception="<%= CaptchaMaxChallengesException.class %>" message="maximum-number-of-captcha-attempts-exceeded" />
	<liferay-ui:error exception="<%= CaptchaTextException.class %>" message="text-verification-failed" />

	<aui:input type="file" name="file" />

	<portlet:resourceURL var="captchaURL">
	    <portlet:param name="<%= Constants.CMD %>" value="captcha" />
	</portlet:resourceURL>    
	<liferay-ui:captcha url="<%= captchaURL %>" />

	<aui:button type="submit" name="submit" />
</aui:form>

2. Add the portlet to a page and introduce the text validation for the captcha image.

3. Save.

Result: text verification error (see attached image validationerror.png)

Expected: no error.