of that ;-)
Thanks!
Markus
Am 22.11.2012 11:17, schrieb Łukasz Lenart:
2012/11/22 i...@flyingfischer.ch i...@flyingfischer.ch:
I experience some problems with umlauts after upgrading from Struts 2.3.4.1
to 2.3.7:
Text with umlauts like 'ä' from properties files get scrambled in the JSPs,
selects
s:property value=...
The problem really is new since 2.3.7. I updated
- struts2-core
- struts2-tiles-plugin
- xwork-core
Markus
Am 22.11.2012 12:46, schrieb Łukasz Lenart:
2012/11/22 i...@flyingfischer.ch i...@flyingfischer.ch:
Hi Lenart
thanks for replying and the input about encoding
Looks good, here too...
...no more encoding issues so far.
And seems much much more performant to me than 3.4.1! ;-)
Thanks!
Markus Fischer
Am 17.12.2012 12:26, schrieb Lukasz Lenart:
Hi,
Please take a time and test the bits - any help is appreciated. The
main goal of this release is to
The download links for 2.3.8 are broken on
http://struts.apache.org/download.cgi#struts238
All the links contain a trailing dot too much after the version number:
wrong
http://mirror.switch.ch/mirror/apache/dist//struts/binaries/struts-2.3.8.-all.zip
correct
The new tag attribute
s:textfield name=model.titel key=alert.tit requiredLabel=true /
throws
org.apache.jasper.JasperException: Unable to find setter method for
attribute: requiredLabel
...
SEVERE: IO Error executing tag: JSPException including path
'/view/editContent.jsp'.
:-) Great!
Thanks for your constant effort and great work!
Markus
Am 05.02.2013 08:10, schrieb Lukasz Lenart:
Thanks for reporting! Resolved!
https://issues.apache.org/jira/browse/WW-3908
I'll wait few more days and will drop 2.3.9 and prepare a new 2.3.10
version, it would be better to
Yes, xhtml theme.
Ok. The * is definitively here ;-)
I stupidly misinterpreted the new tag and replaced the HTML5 required
tag by requiredLable.
Markus
Am 05.02.2013 21:13, schrieb Lukasz Lenart:
Do you use xhtml them?
And requireLabel attribute will generate just '*', but you can use
I do not get any errors any more.
ok!
Markus
Am 05.02.2013 21:24, schrieb Lukasz Lenart:
2013/2/5 i...@flyingfischer.ch i...@flyingfischer.ch:
Yes, xhtml theme.
Ok. The * is definitively here ;-)
I stupidly misinterpreted the new tag and replaced the HTML5 required tag by
requiredLable
The link Releases under
http://struts.apache.org/development/2.x/index.html
seems to be broken:
http://struts.apache.org/development/2.x/downloads.html
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For
I couldn't find any problems. Runs fine...
...though I may not have the most complex situation here for testing
purposes ;-)
Markus
Am 04.03.2013 15:57, schrieb Lukasz Lenart:
to draw your attention
2013/2/28 Lukasz Lenart lukaszlen...@apache.org:
Hi,
Please take a time and test the
+1 [non binding}
Am 09.03.2013 10:56, schrieb Lukasz Lenart:
The Struts 2.3.12 test build is now available. With this release:
- expression support was added to validators' params, so you can
dynamically configure validators base on current action
- new plugin was introduced to support Tiles 3
Works here.
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)
Markus Fischer
Am 19.04.2013 10:46, schrieb Maurizio Cucchiara:
The Struts 2.3.14.1 test build is now available.
It includes the latest security patches which fix two possible vulnerabilities:
* OGNL eval
I had it running here in application all day. No problems so far.
Seems to be fine.
Markus
Am 14.06.2013 13:16, schrieb Lukasz Lenart:
Hi,
Please take a time and test the bits - any help is appreciated. If
there be no problem, I'm going to start Vote next week around
Wednesday
Staging Maven
1+ GA non binding
Markus Fischer
Am 19.06.2013 09:17, schrieb Lukasz Lenart:
2013/6/19 Lukasz Lenart lukaszlen...@apache.org:
The Struts 2.3.14 test build is now available. With this release:
I meant 2.3.15 :-)
Regards
The Logo looks nice. Has a slight reference to the art work of M.C.
Escher. Great work.
Blue is always nice ;-)
The typography however gives the whole logo a not too modern touch,
because it uses letters with serifs. I wonder if this will match nicely
with the serif free home page of struts
Panetta matt...@panetta.id.au:
My thoughts exactly. Needs a different font.
On 07/03/2014 5:41 pm, i...@flyingfischer.ch i...@flyingfischer.ch
wrote:
The Logo looks nice. Has a slight reference to the art work of M.C.
Escher. Great work.
Blue is always nice ;-)
The typography however gives
issue I had was the really thin whitespace lines in the logo;
that
can make some printing a bit trickier.
Because we all want t-shirts and tattoos, right?
Right?
Anyone?
Sure, why not.
On Fri, Mar 7, 2014 at 6:42 AM, i...@flyingfischer.ch
i...@flyingfischer.ch
wrote:
Voltaire
want t-shirts and tattoos, right?
Right?
Anyone?
Sure, why not.
On Fri, Mar 7, 2014 at 6:42 AM, i...@flyingfischer.ch
i...@flyingfischer.ch
wrote:
Voltaire and Oswald seem to be condensed fonts, while Alegreya Sans
SC
and
Alef and others aren't.
I always feel typography is a very
Looks good! Very clean main page, great work.
Maybe the honeycomb-like background image in the green/blue part lacks
some contrast?
Looking forward to the new design!
Markus
Am 08.04.2014 13:07, schrieb Lukasz Lenart:
Next version of website
Main page
https://copy.com/BhaCZtoewOYV
+1 GA
Markus Fischer
Am 25.04.2014 08:37, schrieb Johannes Geppert:
+1
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Johannes
#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep
2014-04-24 23:13
+1
Markus
Am 03.05.2014 05:41, schrieb Paul Benedict:
+1
Cheers,
Paul
On Fri, May 2, 2014 at 4:16 PM, Don Brown mr...@apache.org wrote:
+1
On Fri, May 2, 2014 at 1:58 PM, Dave Newton davelnew...@gmail.com wrote:
+1
On May 2, 2014 3:52 PM, Lukasz Lenart lukaszlen...@apache.org wrote:
/LmnHo87Gydff
She is preparing html css now so I assume after Easters I'm going to
apply the new LF :-)
2014-04-08 19:11 GMT+02:00 Ken McWilliams ken.mcwilli...@gmail.com:
L F is a big step up from what is there! Really nice.
On Tue, Apr 8, 2014 at 8:23 AM, i...@flyingfischer.ch i
+1 not binding.
Markus Fischer
Am 04.11.2014 um 20:28 schrieb Lukasz Lenart:
Should I cancel this vote and prepare new one? If we cannot release
what was tested and verified the whole process doesn't make sense :(
Regards
+1 non binding.
Markus Fischer
Am 28.11.2014 um 08:56 schrieb Lukasz Lenart:
Thanks Volker Greg! I think it's time to vote :)
Regards
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands,
for for being a bit pedantic, and thanks for voting :)
Regards,
René
Am 01.12.14 18:23, schrieb i...@flyingfischer.ch:
+1 non binding.
Markus Fischer
Am 28.11.2014 um 08:56 schrieb Lukasz Lenart:
Thanks Volker Greg! I think it's time to vote :)
Regards
+1 Binding
Markus Fischer
Am 09.05.2015 um 09:22 schrieb Lukasz Lenart:
We need one more binding vote to push this out, anyone?
Thanks in advance
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)
Thanks for the good work!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Runs fine here. Thanks for all the work! 2.5 branch rocks and has a
great performance boost.
Markus
-
To unsubscribe, e-mail:
Between Tomcat 8.38 und 8.39 there seems to be a change in handling URL
parameters:
=1|2
This will cause Tomcat to return a 400 error since 8.39. It is the
character "|" that causes the new behaviour. I suspect these changes:
Sorry! Wrong mailing list...
Markus
Am 03.12.2016 um 13:56 schrieb Łukasz Lenart:
Is it related to Apache Struts?
Cheers
Lukasz
2016-12-03 12:47 GMT+01:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
Between Tomcat 8.38 und 8.39 there seems to be a change in handling URL
parameter
___
From: i...@flyingfischer.ch <i...@flyingfischer.ch>
Sent: Saturday, December 3, 2016 8:18 AM
To: Struts Developers List
Subject: Re: Valid characters in http requets: Tomcat 8.38 -> 8.39
Sorry! Wrong mailing list...
Markus
Am 03.12.2016 um 13:56 schrieb Lukasz Lenart:
I
ader lines have already been unwrapped.
(The Tomcat header processing code does the unwrapping.)"
Best regards
Markus
You may also reach me off-list, since we are on the struts-list here:
i...@flyingfischer.ch
Am 05.12.2016 um 14:09 schrieb Martin Gainty:
perhaps we're dealing with a
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Already in production and working great!
Markus
Am 11.07.2017 um 09:10 schrieb Lukasz Lenart:
> The Apache Struts 2.5.12 test build is now available. With this
> release the following security vulnerabilities were
Am 18.07.2017 um 07:54 schrieb Lukasz Lenart:
> Hi,
>
> There is a few issues registered that pop up after releasing 2.5.12, I
> would like to fix them and push out an another version of 2.5.x
> branch.
>
> https://issues.apache.org/jira/projects/WW/versions/12341116
>
>
> Regards
I didn't want to
Am 05.07.2017 um 13:23 schrieb Lukasz Lenart:
> This is very strange ... I don't understand where is the problem :\ Do
> you serve those CSSs files via the Strust filter as a static content?
>
The CSS file seems to get through. The Layout is as should. The CSS file
is packed in a subdirectory of
lt;lukaszlen...@apache.org>:
>> I was able confirm this somehow ... but I need your exact setup, what
>> version of Bootstrap do you use? Do you use FontAwesome directly?
>>
>> There is no issue when I used a pure reference to FontAwesome (with
>> their CDN) but it d
Works like a charm!
Thank a lot!
Markus
Am 06.07.2017 um 11:28 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report back any problems. I'll call for vote in few days if no
> problems will be spotted.
>
> Staging Maven repo
>
No big deal and probably not related to 2.5.11. Is this on purpose:
redirectAction behaves differently depending on the name of the result.
login
${myParam}
Called in action as: return "redirectToLogin";
=> myParam gets transmitted as expected.
> This may have other reasons. Is there a value for myParam in every case?
> What have you configured for struts.url.includeParams?
>
>
> Regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>
You are right! It's been an issue with myParam and not the architecture.
Shame...
It
On Unix try to add something like:
struts.multipart.saveDir=/tmp
Markus
Am 08.08.2017 um 19:26 schrieb Deborah White:
> Thank you, got it. :) One more question. Do you know why I am seeing this
> since migrating?
>
> Unable to find 'struts.multipart.saveDir' property setting. Defaulting to
>
Am 26.06.2017 um 08:57 schrieb Lukasz Lenart:
> 2017-06-25 8:07 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> I get stuck with the refactored LocalizedTextUtil:
>>
>> We had a change in 2.5.2 which disallowed the use of getText(String key)
>&
> At the moment testing locally and not online:
>
> Browser send en-US,en;q=0.5 on default
> OS linux on german locale
> changing locale in application by ?request_locale=it
> in struts.properties: struts.custom.i18n.resources=global-messages
>
> properties files:
>
>
> I did some more tests:
>
> Test 1: in action hardcoded messages:
>
> jsmsg = new JSMessage("Show up!");
>
> On default locale: message shows up.
> Any other locale: No show up
>
> => Problem persists
>
> Test 2: in JSP hardcoded message
>
>
> notif({
>msg: "Show up!",
>
> Very strange: values do get replaced:
>
>
> notif({
> msg: "Ungültige Angaben!",
> type: "info",
> position: "center",
> opacity: 0,9,
> timeout: 5000,
> multiline: true,
> autohide: true,
> clickable: false
> });
>
>
> But JS box will still not show up, when not on default locale...
>
>
I detected a strange issue. The problem is not present in 2.5.10.1 but
only in 2.5.11:
In jsp:
This will not show up as icon, but as kind of scrambled text. Using
struts2-tiles-plugin.
Hard to imagine to be struts related, but could this still be possibly
related to any of the recent changes?
Another issue, since 2.5.11:
Javascript boxed messages display, if the language is the default
language (en). As soon as switching the application to another locale
(e.g. de), js-box messages do not display anymore...
...this IS NOT related to retrieving the values from the corresponding
I get stuck with the refactored LocalizedTextUtil:
We had a change in 2.5.2 which disallowed the use of getText(String key)
in classes that cannot extend ActionSupport.
I did work around with a custom utility class that did the job, built
mainly around:
final String value =
searches the
> hierarchy etc.
>
> On 25 June 2017 at 07:07, i...@flyingfischer.ch <i...@flyingfischer.ch>
> wrote:
>
>> I get stuck with the refactored LocalizedTextUtil:
>>
>> We had a change in 2.5.2 which disallowed the use of getText(String key)
>>
Am 26.06.2017 um 10:23 schrieb i...@flyingfischer.ch:
> Am 26.06.2017 um 09:04 schrieb Lukasz Lenart:
>> 2017-06-25 15:26 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>>> I detected a strange issue. The problem is not present in 2.5.10.1 but
>>&g
Am 26.06.2017 um 09:04 schrieb Lukasz Lenart:
> 2017-06-25 15:26 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> I detected a strange issue. The problem is not present in 2.5.10.1 but
>> only in 2.5.11:
>>
>> In jsp:
>>
>> This will not s
Am 26.06.2017 um 11:01 schrieb Lukasz Lenart:
> 2017-06-26 10:23 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> Using FontAwesome
> Same here
>
>> I am on thin ice: I fear the images do display as kind of textual
>> representation of private use unico
Am 26.06.2017 um 11:55 schrieb Lukasz Lenart:
> 2017-06-26 11:50 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> Yes, the import statement is already there. It is a combined css file
>> (fonts and other CSS statements). Works perfect, also for 2.5.11. But
Am 26.06.2017 um 11:17 schrieb Lukasz Lenart:
> 2017-06-26 10:50 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> Using
>>
>> instead of
>>
>> resolves the issue. But I still suspect a change in coding / treating
>> unicode in Struts.
>
> It must be a bean create by the framework, e.g. an action, then the
> LocalizedTextProvider gets injected. If you want to use it in some
> other context you can use this approach:
>
> LocalizedTextProvider provider =
> ActionContext.getContext().getInstance(LocalizedTextProvider.class)
>
> Right... switching to LocaleUtils from commons wasn't that easy as I
> thought ;-) Can you register a ticket in JIRA and I will fix that :)
>
>
> Regards
Thanks Łukasz, for your ongoing great work! :-)
Markus
-
To
Sorry for all these mails. One thing more that seems to have changed:
<2.5.11 calling empty locale "?request_local=" will result in locale en,
if I am not mistaken.
2.5.11 calling empty locale "?request_local=" will result in locale
object (not null) with property languageTag null
Both versions
Am 27.06.2017 um 08:12 schrieb Lukasz Lenart:
> 2017-06-26 21:27 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> Now EL brings replaces
>>
>>
>>
>> in locale en with 0.9 and in all other locales with 0,9 (note the COMMA).
> Oh... thanks a
Am 27.06.2017 um 08:42 schrieb Lukasz Lenart:
> 2017-06-27 8:38 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> Thanks! This works fine. And you are perfectly right:
>>
>> StringEscapeUtils.unescapeHtml4(value.replaceAll("''", "'"));
Am 27.06.2017 um 10:05 schrieb Lukasz Lenart:
> 2017-06-27 8:59 GMT+02:00 i...@flyingfischer.ch <i...@flyingfischer.ch>:
>> For the time being, it really can't be shorter than this?:
>>
>> final LocaleProviderFactory factory =
>> Actio
Am 25.08.2017 um 11:53 schrieb Lukasz Lenart:
> Thanks Yasser!
>
> Anyone else having problems with this build?
>
>
> Regards
Seems to run fine.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional
Am 04.09.2017 um 12:07 schrieb Lukasz Lenart:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Works already perfect in production.
Markus
-
To unsubscribe, e-mail:
[X] General Availability (GA)
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
Am 21.10.2017 um 14:51 schrieb Yasser Zamani:
> With thanks to Struts good design, fortunately, it was not as hard as I
> thought and I almost finished :)
>
> Just one blocking problem :( Currently Struts is on servlet-api 2.4. I
> remember Struts 2.6 will have servlet 2.5. And so so ... As I
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Works fine here. Already in production.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail:
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
+1 nb
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
1++
commons-beanutils-1.9.3.jar works here in production since ages.
Markus
Am 24.06.2018 um 11:37 schrieb Greg Huber:
> Should we bump commons-beanutils-1.8.0.jar to the latest 1.9.3?
>
> struts2-tiles-plugin
>
> Cheers Greg
>
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Thanks!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
Seems to run fine here.
Thanks!
Markus
Am 26.09.2018 um 11:50 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report back any problems. I'll call for a vote in a week if no
> problems will be spotted.
>
> Staging Maven repo
>
Possibly in this section?:
https://github.com/rapid7/metasploit-framework/issues/8064
Am 20.01.19 um 13:02 schrieb Greg Huber:
> Any ideas?
>
> 14.98.162.41 - - [18/Jan/2019:18:13:32 +] "POST
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
>
Markus
Do not know if this is by intention:
The release notes state many library updates, and also
commons-collections4 4.1 -> 4.2
https://issues.apache.org/jira/browse/WW-4978
However, the standalone
+1
Markus
Am 11.01.19 um 21:35 schrieb Aleksandr Mashchenko:
> We discussed it before but it was quite some time ago. How about
> upgrading to jdk8 in 2.6 version?
>
> - Java versions are now released more frequently
> - 2.5.x will still be on jdk7
> - Currently custom converters must be
No further issues discovered here.
Good to go.
Thanks for your sustaining and continuing work!
Markus
Am 17.09.2018 um 08:06 schrieb Lukasz Lenart:
> Hi,
>
> I think we are ready to release two new releases, 2.3.36 and 2.5.18:
> - 2.3.36 is going to fix an issue with using ArrayList (backed
Just stumbled over:
https://scan.coverity.com/projects/apache-struts-2
Could this be of interest?
Best
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail:
Dear Yasser
I perfectly understood that the proposed change is proactive and that
there are no open known vulnerabilities. ;-)
Best regards
Markus
Am 16.09.19 um 15:42 schrieb Yasser Zamani:
>> -Original Message-
>> From: i...@flyingfischer.ch
>> Sent: Monday, Septe
Seems to me not to be the right place to correct any possible problems,
and far off any related root of a possible issue.
The config would definitively need an option to be disabled totally. I
expect very unexpected and hard to trace side effects, depending on the
application in place.
Markus
Dear Yasser
we definitively need an option to totally disable this "feature". It
really depends on what kind of application you deploy.
Logging a warning seems appropriate. But we should avoid logging a
warning while the "feature" is disabled.
I also fear that this will lead to vulnerable
per Markus' comments), with
>> individual
>> applications still able to set a limit, should they wish to do so via
>> configuration.
>>
>> For 2.6 maybe a lower value for a default (such as Łukasz' suggestion of 256)
>> would be OK, provided it is a clearly document
eply to the dev list to let us know if that helps or not.
>
> Thanks,
>
> James.
>
>> It is reported in WARN level:
>>
>> WARN com.opensymphony.xwork2.ognl.OgnlValueStack - Could not evaluate
>> this expression due to security constraints:
>>
>> Mar
See new errors like this:
Caused by: java.lang.SecurityException: This expression exceeded maximum
allowed length:..
followed by a longer OGNL expression in JSP.
Markus
Am 07.11.19 um 20:57 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
It is reported in WARN level:
WARN com.opensymphony.xwork2.ognl.OgnlValueStack - Could not evaluate
this expression due to security constraints:
Markus
Am 07.11.19 um 23:12 schrieb i...@flyingfischer.ch:
> See new errors like this:
>
> Caused by: java.lang.SecurityException: This e
Hello
I am running 2.5.21 in production in several projects. Everything is
running fine and smooth. No issues so far.
Markus
Am 18.11.19 um 02:30 schrieb J C:
> Hello.
>
> Did some testing of the showcase and rest-showcase applications in the 2.5.21
> test build (and a very quick test of the
Seems to run fine too.
Thanks!
Markus
Am 17.11.19 um 20:42 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report any problems. I'll call for a vote in a few days if no problems
> will be spotted.
>
> Staging Maven repo
>
them with us? (Does that one look rational? Is it easily readable and
> maintainable? If not, isn't it better to move that logic into your
> action and just use maintainable?).
>
> Please see inline...
>
> On 11/8/2019 9:43 AM, i...@flyingfischer.ch wrote:
>> Hello JC
>>
Am 26.11.19 um 09:32 schrieb Lukasz Lenart:
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Works perfect in production. Thanks for your good work!
Markus
-
To unsubscribe, e-mail:
Absolutely!
Best regards
Markus
Am 26.08.20 um 08:46 schrieb Lukasz Lenart:
> Can we assume a silence consensus here?
>
> http://community.apache.org/committers/lazyConsensus.html
> https://www.apache.org/foundation/voting.html#LazyConsensus
>
> Regards
Seems to run fine here.
Thank for you steady good work!
Best regards
Markus
PS: maybe to consider for an upcoming release: there are some newer
version of used librarires which do work fine in Struts2, as
commons-collections4-4.4
commons-io-2.7
commons-lang3-3.11 (would need to check, if
in a couple of days, since this is a dynamic situation. So we
may leave this very well up to individual responsibility to do so.
Best
Markus
Am 19.08.20 um 08:52 schrieb Lukasz Lenart:
> wt., 18 sie 2020 o 10:27 i...@flyingfischer.ch
> napisał(a):
>> PS: maybe to consider for an upco
Am 24.09.20 um 07:07 schrieb Lukasz Lenart
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
>
Thanks!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands,
I second NOT dropping XML configuration support.
Best
Markus
Am 08.07.20 um 09:19 schrieb Lukasz Lenart:
> wt., 7 lip 2020 o 16:37 Yasser Zamani napisał(a):
>> Yes it's awesome and I've also been thought for long time to add boot
>> and auto-config (because I've seen people have concerns about
Seems to work fine here.
Markus
Am 21.11.20 um 09:02 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report any problems. I'll call for a vote in a few days if no problems
> will be spotted.
>
> Staging Maven repo
>
+1
Am 20.09.21 um 15:59 schrieb Dave Newton:
+1
On Mon, Sep 20, 2021 at 1:25 AM Lukasz Lenart
wrote:
Hi,
I would like to release the last 2.5.x version and focus on Struts
2.6. All the PRs that are targeting Struts 2.5.x should be re-targeted
to Struts 2.6 (the master branch) and we
I did take a look at
https://github.com/apache/struts/pull/483
https://github.com/apache/struts/pull/496
This seems to me too big of a change for the current 2.5 branch. It
should be reconsidered or reevaluated eventually for an upcoming 2.6
branch. It also seems sensible to me to have a
[X] General Availability (GA)
Works fine in production since some days. Thanks!
Markus
Am 30.03.22 um 11:39 schrieb Lukasz Lenart:
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[ ] General Availability (GA)
Everyone who has tested the build is invited to vote. Votes by PMC
members are
Perfect Łukasz
thanks for all your work.
Best regards
Markus
Am 01.09.23 um 09:01 schrieb Lukasz Lenart:
Hi,
If you take a look at the list messages [1] you notice the most of
them are related to failed builds from Jenkins and then back to normal
notifications. This is clustering the list
[X] General Availability (GA)
Markus
Am 01.09.23 um 08:44 schrieb Lukasz Lenart:
The Apache Struts 6.3.0 test build is available. With this release the
following issues were addressed:
Improvement
[WW-5233] - Include Apache Tiles code base in the Tiles plugin
[WW-5321] - notify / document
You may use this in Struts.xml
You need to find you longest OGNL value, discipline yourself to shorten
those, rethink you variable name length or disable this completly
Not that much of a convincing approach to improve security, but maybe
better than not. I did not like it at all,
Besides incrementing or disabling this arbitrary limit with
You may also work with a most ugly hack by defining a variable in your jsp
and then use this very short variables in your too long OGNL expression.
Ugly, does add to code complexity and increases the overall failure
rate.But may
related to
commons-digester? Unfortunately I cannot reproduce the issue
straightforward. I just see the error in the log. Calling the path
directly does not cause the issue. May there be a connection with a not
present session?
Markus
Am 29.08.22 um 11:36 schrieb i...@flyingfischer.ch:
Removing
If I see this correctly, this happens only with OPTIONS and HEAD
requests
Am 29.08.22 um 14:09 schrieb i...@flyingfischer.ch:
After removing commons-digester3-3.2 and leaving commons-digester-2.1
only, I still get the Warnings/Errors in production:
WARN org.apache.struts2
1 - 100 of 137 matches
Mail list logo
