Re: The different output with Date whether the Http request have application/json

Hi, Thanks for reaching out! Could you please try setting your desired value to Struts constant "struts.json.dateformat" and see if any change happens? Or try https://stackoverflow.com/a/59471917? Regards, Yasser From: Sent: Saturday, December

Re: Struts 6.3 tags do not automatically evaluate the value field against the ognl stack

<#include "/${parameters.templateDir}/${parameters.expandTheme}/css.ftl" /> <#include "/${parameters.templateDir}/${parameters.expandTheme}/scripting-events.ftl" /> <#include "/${parameters.templateDir}/${parameters.expandTheme}/common-attributes.ftl"

Re: Struts 6.3 tags do not automatically evaluate the value field against the ognl stack

Hi Nate, Thanks for reaching out! What I can't understand is how your app evaluates the value. Because I see the following in Struts UIBean.java since 2006: // see if the value was specified as a parameter already if (parameters.containsKey("value")) {

S2-064: CVE-2023-34396: Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms

Affected versions: - Apache Struts through 2.5.30 - Apache Struts through 6.1.2 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Credit: Matthew

S2-063: CVE-2023-34149: Apache Struts: DoS via OOM owing to not properly checking of list bounds

Affected versions: - Apache Struts through 2.5.30 - Apache Struts through 6.1.2 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Credit: Matthew

Re: Mirgrating to struts 2.5.30 from 2.3.37

Hi Rohan, Looks like something in logon.jsp is evaluated to null and you get NullPointerException. So I think firstly you need to debug jsp and see what's the root cause. If it's from Struts or not. Regards, Yasser On 5/18/2023 8:29 AM, Rohan Patil7 wrote: Hi team, Earlier, we have

Re: New warning message with V6.1.1 - SecurityMemberAccess...

You would have .disabled somewhere in your own app code ognl expressions, I would guess. Could you please search for .disabled there? Or put a break-point at [1] and see what ognl, how and why are trying to access UIBean.disabled non-public member! Regards [1]

Re: When Struct 2.3.34 update Struct 2.5.30,the original interface cannot be accessed

On 9/10/2022 9:27 AM, wwyyzz_001 wrote: "login" action is defined in default namespase."success" result is defined inglobal-results,result type is json. Where in which package you've defined the global-results? Could you share please its definition? Have you extended strus-default?

Re: Not able to get Array of Objects values from one Action class to another

Hi, Thanks for reaching out! I think it will work, but only for simple objects like strings and numbers. Are they simple object and it doesn't work? then please provide your jsp and action related portions. If not, then I think you likely should use session to store complex objects.

Re: Problem with Struts 6.0 and Bootstrap plugin

I think you should keep the global 'output_format' unset. Regards. On 2022/06/23 21:07:44 Ralph Grove wrote: > I’m working on a Struts application that uses the Struts Bootstrap plugin. I > upgraded it to Struts V6 by installing theses libs: > > commons-fileupload-1.4.jar >

Re: struts.ognl.expressionMaxLength

Hi Ralph, Thanks for using this feature! Yes you're right. Struts uses OGNL not only for user's expressions, but also internally for its internal purposes :( and unfortunately, this feature cannot distinguish between them. By the way, according to our security reports so far, 200 should be

Re: Date Type Converter strange behavior

Hi thanks for reaching out! I don't remember and should check that your desired behavior used to work or not but as a quick answer I think you're looking for Class wide conversion [1] e.g. @TypeConversion(type = ConversionType.APPLICATION, property = "java.util.Date", DateConverter.class)?

Re: AliasInterceptor parameter mapping issue

Hi Brian, Sorry for inconvenience :( yes for me as well it looks like an unintentional bug introduced by [1]. Thanks a lot for writing to us! To followup its resolution would you mind create a new JIRA ticket? Regards. [1]

Re: Struts 2.5.23

Hi thanks for the test build! I think because mvnw cannot accept -D... jvm options directly. Regards. On 7/3/2020 10:29 AM, Lukasz Lenart wrote: > Now I'm confused, this helped, but I was doing exactly the same thing :\ > > export MAVEN_OPTS=-Dhttps.protocols=TLSv1,TLSv1.1,TLSv1.2 > >

RE: have plan to upgrade version of spring in struts 2 Spring plugin?

Hi, Thank you so much! Yes we will upgrade Spring gradually during Struts 2.6.x releases - Struts 2.5 is under maintenance mode only for security releases. However, recent Struts 2.5.22 uses Spring 4.3.25.RELEASE [1]; doesn't it work for you? Regards. [1]

RE: convention plugin Issue

Hi, I guess that the behavior of defining actions with same name and namespace is undefined. I think it's not an issue because Convention Plugin has no avenue to distinguish between them when you request http://localhost:8080/hello-world. Regards. >-Original Message- >From: Zahid

RE: blank Page

>-Original Message- >From: Zahid Rahman >Sent: Wednesday, December 4, 2019 8:11 PM >To: Struts Users Mailing List >Subject: blank Page > >Hi, > >I downloaded the latest JVM and tomcat. >I set JAVA_HOME as system variable to the latest version of JVM like any >developer. >the tomcat

RE: /struts-2.5.22-all.zip where can download

Hi Zahid, Thanks for that! Could you please move it as a pull request at https://github.com/apache/struts-site/? Once done you can see result at https://struts.staged.apache.org/ (it's hard to read your changes here at mail list) Kind Regards. >-Original Message- >From: Zahid Rahman

RE: OFF TOPIC: hot reload

Did you mean Struts' "configuration" e.g. struts.xml file hot reload? Kind Regards. >-Original Message- >From: Zahid Rahman >Sent: Thursday, November 28, 2019 1:17 PM >To: Struts Users Mailing List >Subject: OFF TOPIC: hot reload > >FLUTTER'S hot reload (memory Hungary emulator) and

RE: Update views how to ?

of server >resources and network bandwidth. >Reference: https://www.javaworld.com/article/2077995/java-concurrency/java- >concurrency-asynchronous-processing-support-in-servlet-3-0.html >"> >Asynchronous processing support in Servlet 3.0 > > >On Sun, 24 Nov 2019, 08:

RE: Update views how to ?

Hi Zahid, Additionally, AFAIK... If your users are a lot, then I think you have to wait for Struts 2.6 release where I've added support for Async actions. For an instance usage see my example at [1] (you can try it via running Struts 2.6 snapshot showcase - it's a simple chat room i.e.

Re: /struts-2.5.22-all.zip where can download

Hi, https://dist.apache.org/repos/dist/dev/struts/2.5.22 Thanks for testing the bits! Regards. On 23 November 2019, at 20:03, Sai Man Yau mailto:ieomon...@gmail.com>> wrote: Dear Friends, I would like to know where could I download the dev/struts/2.5.22/struts-2.5.22-all.zip for my local

RE: How to pass parameters to s:component inside s:iterator?

Hi Albert, Could you try without the inner s:if tag? I remember that some tags don't work inside each other :( Despite if it was the problem or not, I think it's more readable design to move iterator and if tags inside the component (items.jsp) itself, have you ever considered it? Regards.

Re: How to auto submit a jsp page after loading

Hi Albert, I think Dave is right -- if you wanted to test, then you would not do this. What have you been using for test? If it tested UI also (e.g. Selenium), it would have facilities to automate clicking on submit button [1]. If you didn't want to test UI at all (e.g. JMeter), you would not

Re: JSON plugin: filter fields in a Map with Lists

cified in message only. It is strictly forbidden to share any part of > this message with any third party, without a written consent of the > sender. If you received this message by mistake, please reply to this > message and follow with its deletion, so that we can ensure such a > mistake

Re: JSON plugin: filter fields in a Map with Lists

s confidential and intended for the recipient > specified in message only. It is strictly forbidden to share any part of > this message with any third party, without a written consent of the > sender. If you received this message by mistake, please reply to this > message and follow

RE: JSON plugin: filter fields in a Map with Lists

>-Original Message- >From: Micael Carreira >Sent: Tuesday, September 24, 2019 1:30 PM >To: user@struts.apache.org >Subject: JSON plugin: filter fields in a Map with Lists > >Hello, > >In MyAction, I have the following instance variable: > >     Map> result; > >And MyObject has the

RE: Migrating the Migration Guide

Hi, Sorry I cannot recall why we should migrate -- Have INFRA compelled us and Confulence is going to be removed? Or just to beautify? Anyway, I think we can use a Jekyll/Ruby custom tag component which at site build time, downloads that Confulence's page html as an anonymous user and

ApacheCon Europe 2019: Join Struts Hackathon!

Dear Struts Community (@user, @dev, @pmc), There will be a hackathon space at ApacheCon Europe 2019 in Berlin reserved for Struts. It will be available on 23rd/24th October from 1:00 PM for 2/4 hours. We want to invite everybody to participate on the hackathon where we are collaboratively

Re: Invalid Field Value when using Map

Me too! Could you please put a break-point at your app's [1] and see what happens next for that field? Regards. [1] https://github.com/apache/struts/blob/651eac2c57396aa11ee65002006b3123dd69cbb4/core/src/main/java/com/opensymphony/xwork2/conversion/impl/XWorkConverter.java#L445 > > Thanks

RE: Invalid Field Value when using Map

t in the map. The JSP stops at the field which has String value. > >So even if I add additional validations to make sure all values in the map are >Doubles it would still cause a problem as Struts would not be able to display >the >input form. > >Thanks, >Prasanth >

Re: Invalid Field Value when using Map

bjects added > to Maps. > > Thanks, > Prasanth > > On 6/19/19 1:29 AM, Yasser Zamani wrote: >> Hi Prasanth, >> >> I'm surprised how you get non digit characters in your map while both >> key and value are not String! >> >> Regards. >> &

RE: Invalid Field Value when using Map

Hi Prasanth, I'm surprised how you get non digit characters in your map while both key and value are not String! Regards. >-Original Message- >From: Prasanth >Sent: Monday, June 17, 2019 8:52 PM >To: Struts Users Mailing List >Subject: Invalid Field Value when using Map > >Hi, > >I

Re: Upgrade from struts 2.3.37 to struts 2.5.20 issue.

> org.apache.struts2.config.StrutsXmlConfigurationProvider.loadPackages(StrutsXmlConfigurationProvider.java:108) > ~[struts2-core-2.5.20.jar:2.5.20] > at > com.opensymphony.xwork2.config.impl.DefaultConfiguration.reloadContainer(DefaultConfiguration.java:196) > ~[struts2-core-2.

Re: Upgrade from struts 2.3.37 to struts 2.5.20 issue.

Hi FANG, I am not familiar with that plugin but as a simplest solution, does your application compile when you simply put it's latest version jar in your classpath? If so, does it run correctly? If not then I will look at that plugin and think about any solution :) - and please also include the

RE: Migration Help for angular2

>-Original Message- >From: Gopal, Siva Prakash (US - Mechanicsburg Delivery) > >Sent: Wednesday, May 22, 2019 10:51 AM >To: Struts Users Mailing List >Subject: RE: Migration Help for angular2 > >Our Current Application as below structure > > > >Config.xml > > > > >

RE: No Form Found under '' in locale 'en_CA'. A Form Must be defined in the Commons Validator configuration...

Hi Edmound, good morning, Struts 1 EOL has occurred years ago and I think unfortunately we don't have any one in current team to handle such issues. Thanks for using Struts. Regards. >-Original Message- >From: edmound.hubbard.oildex@ edmound.hubbard.oil...@gmail.com> >Sent: Thursday,

RE: Issue : Binding Integer Array upon form submission

Hi Muhammad, I tested your sample exactly and works as expected here (setRfaAccessType(Integer[] rfaAccessType) called with ticked values). The first thing you can do is enabling devMode and log level to warn and looking output for any relevant warnings. If not try debug level. Thanks for

RE: HashMap with String as key

(regarding your previous emails background) Please also consider that the key 2432-123 is not further Long. It's String. Regards. >-Original Message- >From: Lukasz Lenart >Sent: Tuesday, March 12, 2019 10:52 AM >To: Struts Users Mailing List >Subject: Re: HashMap with String as key >

RE: Migrating from Struts 1.2 to recent Struts

Hi David, These are some useful resources I found via googling: * Official Migration Guide: Struts 1 to Struts 2 [1] * Stackoverflow answer: Migration from Struts 1 to Struts 2 [2] * InfoQ Migration Guide, part one [3] Thanks for using Struts! Kind Regards. [1]

RE: Mapping struts.xml actions to their full URL

Hi there, The whole Struts itself is a servlet/filter defined in web.xml and you cannot divide your actions between multiple servlet/filter I think. Regards. >-Original Message- >From: shonlevin1234@ >Sent: Monday, March 11, 2019 3:45 PM >To: user@struts.apache.org >Subject: Mapping

Re: Help with syntax struts 2

On 3/9/2019 3:34 AM, Deborah White wrote: > Can someone help me with the syntax on this? > > Hi Deborah, I tested the syntax and it works. If it doesn't work there then I guess if reportId is String then try else then try . Also try replacing || with && or != with == variations. Thanks

Re: Map backed form

@TypeConversion(rule=ConversionRule.MAP, key="java.lang.Long", > value="java.lang.Integer") >     public void setDeferralCode(HashMap deferralCode) { >         this.deferralCode = deferralCode; >     } > > Thanks, > Prasanth > > On 2/16/19 3:20 AM, Ya

RE: Jboss 7.2 gives 404 after deployment

>From: John W. Himpel >Sent: Saturday, February 23, 2019 11:22 PM >To: user@struts.apache.org >Subject: Jboss 7.2 gives 404 after deployment > >Greetings, > >I have a very small Struts web app that I developed under Red Hat Developer >Studio. > >I am using Struts 2.5.20, Jboss 7.2.0. >

Re: How to use s:iterator s:include s:param

Hi Albert, I found following at [1]. "Note: Any additional params supplied to the included page are not accessible within the rendered page through the tag since no valuestack will be created. You can, however, access them in a servlet via the HttpServletRequest object or from a JSP page via a

RE: Array of submit buttons

>From: Prasanth >Sent: Friday, February 15, 2019 3:02 AM >To: Struts Users Mailing List >Subject: Array of submit buttons > >Hi, > >I have a form with tabular data and need to have delete buttons for each row. >So >have a ArrayList in the action and the form has name="delete[%{#rowNumber}]"

RE: Map backed form

I think a file named yourActionClass-conversion.properties beside your action with following contents should help [1]: Key_xxx=java.lang.Long Element_xxx=java.lang.Double (where xxx is the field name of the collection property in your action or object) Regards. [1]

RE: [struts-user] XML based configuration

We had similar resolved issue at [1]. Could you please see if [2] fixes this also? Regards. [1] https://lists.apache.org/thread.html/f4e1d1a5c917d0fa759cce667b23ef1e076c51ad7907dcfbdeb88707@%3Cdev.struts.apache.org%3E [2]

Re: How to import Struts Examples into Eclipse IDE inside a single project

Hi Albert, Please see if https://stackoverflow.com/a/38714946 helps. If not, you have to ask Eclipse team or research further if it is even possible and how. Unfortunately I don't have experience with any multi-module maven project with Eclipse (it's not specific to Struts). Regards. On

RE: Struts2 Checkboxlist

>            >        >        form >    >    >        -1 >    > > >Thanks, >Prasanth > >On 2/5/19 5:43 AM, Yasser Zamani wrote: >> Hi Prasanth, >> >> Yes, I think. Now I can recall a long discussi

RE: Struts2 Checkboxlist

know that is how Struts1 worked. >> >> Thanks, >> Prasanth >> >> On 2/2/19 7:08 PM, Prasanth Pasala wrote: >>> Hi Yasser, >>> >>> When none of the checkboxes is selected the setFoo is not getting called. >>> >>> Thanks >>

RE: Struts2 Checkboxlist

Hi Prasanth, AFAIK this tag is like this: It calls getBar method of your action or finds bar in value stack to find out what to display. Same for baz to find out which to be selected. Then it calls yourAction.setFoo to post selected items. i.e. it is up to you what you do with it in setFoo

RE: Escaping dollar sign and curly brackets

>From: Micael Carreira >Sent: Friday, February 1, 2019 6:56 PM >To: user@struts.apache.org >Subject: Escaping dollar sign and curly brackets > >Hey, > >In my action I'm using getText(myKey) to get a localized string. This string >has >some placeholders of mine, in ${placeholder} format. Consider

RE: EmptyStackException after upgrading Struts 2.3 to 2.5

>From: Lukasz Lenart >Sent: Tuesday, January 29, 2019 2:18 PM >To: Struts Users Mailing List >Subject: Re: EmptyStackException after upgrading Struts 2.3 to 2.5 > >wt., 29 sty 2019 o 11:30 Yasser Zamani napisał(a): >> Yes you both are right. It looks like a race condi

RE: EmptyStackException after upgrading Struts 2.3 to 2.5

Hi, Yes you both are right. It looks like a race condition between stack.clear and stack.write [1]. But somehow it's odd. I was aware about this and defined them as prototype [2] so I except new instance on each request. I also can recall I tested them heavily on high concurrent load [3]. By

RE: S2.5.20 Illegal reflective access by ognl.OgnlRuntime

Hi Lukasz, Just FYI I personally feel it's not related to static accesses - It seems Java 11 warns such accesses and next Java release won't allow such accesses anymore i.e. current ognl won't work on them anymore. Regards. >-Original Message- >From: Lukasz Lenart >Sent: Friday,

Re: Java 11 support

/issues.apache.org/jira/browse/WW-5006) which is related to OGNL > accessing static fields. > > Kind regards, > > Sebastian > > Am 24.01.2019 um 12:13 schrieb Yasser Zamani: >> Hi Sebastian, thanks again for your time to feed back! It's really a >> great help.

Re: Java 11 support

; > I have followed your instructions. The exceptions are gone although my > webapp does not work either. > But I need more time to figure out whether this is a general > compatibility issue between struts2 2.5.2 and 2.5.20 or a matter of the > Java 11 compiler. > > > Am 23.0

Re: Java 11 support

On 1/24/2019 10:28 AM, Lukasz Lenart wrote: > śr., 23 sty 2019 o 15:49 Yasser Zamani napisał(a): >> I'm not sure if I get your point correctly but I didn't change `target` in >> [1]. >> >> If you meant the user's itself java 11 compiled classes structure, to do

RE: Java 11 support

>-Original Message- >From: Lukasz Lenart >Sent: Wednesday, January 23, 2019 4:59 PM >To: Struts Users Mailing List >Subject: Re: Java 11 support > >śr., 23 sty 2019 o 14:10 Yasser Zamani napisał(a): >> >I would start with detecting a proper Java ver

RE: Java 11 support

>-Original Message- >From: Lukasz Lenart >Sent: Wednesday, January 23, 2019 11:34 AM >To: Struts Users Mailing List >Subject: Re: Java 11 support > >śr., 23 sty 2019 o 08:35 Yasser Zamani napisał(a): >> I would prefer to allow user to optionally override th

RE: Java 11 support

>-Original Message- >From: Lukasz Lenart >Sent: Tuesday, January 22, 2019 12:03 PM >To: Struts Users Mailing List >Subject: Re: Java 11 support > >Ok, thanks. I see your point now, but this can be hard to support as we must >support Java 7 (or Java 8 in case of Struts 2.6) and at the

RE: Java 11 support

>-Original Message- >From: Paul Zepernick >Sent: Friday, January 18, 2019 4:24 PM >To: Struts Users Mailing List >Subject: RE: Java 11 support > >I can confirm that this was the same error I was seeing when trying Java 11 >using >Struts 2.5.18. It is happening in the convention

RE: Java 11 support

>-Original Message- >From: Sebastian Götz >Sent: Thursday, January 17, 2019 4:41 PM >To: user@struts.apache.org >Subject: Re: Java 11 support > >Hi folks, > >it appears that there is some work left in the convention plugin. As I can see >from >my IVY resolve process this plugin drags

RE: Java 11 support

Hi Sebastian, Yes the release will be ready this month hopefully this week already ☺ Kind Regards. From: Sebastian Götz Sent: Tuesday, January 15, 2019 10:51 AM To: Yasser Zamani Subject: Re: Java 11 support Hi Yasser, sure! We are not in a hurry :-) but really looking forward

Re: Java 11 support

Hi Sebastian, I'm pleased to announce it seems we were able to add both java 9 and 11 supports into Struts 2.5.20. Could you please wait a few days for its release and then test the bits? It currently can pass all tests with all jdks (see [1]) but it's so great if you will be able to test it in

RE: Context parameters not being ignored?

eters not being ignored? > >Sorry for the delay in replying, I was on holidays. By the way, have a happy >new >year :) > >Here is the stack trace of both injections: >https://pastebin.com/6wMpWK8a > >Cheers, >Micael > >On 22/12/18 08:19, Yasser Zamani wrot

RE: How to display both selected key and value of s:select

Hi Albert, The simplest method can be something like this: public class RegisterAction { ... public Country getSelectedCountryObject() { foreach (c in countryList) if(c.countryId==selectedCountry) return c; } ... } Thanks for using Struts. Kind Regards. >-Original Message- >From:

RE: [ask] How to pass multiple radio button in struts2

Hi, As different values are setting into same viewAccess[0], I guess instead `private String viewAccess[][];` (array of array) would work. Regards. >-Original Message- >From: M Huzaifah >Sent: Friday, December 21, 2018 11:44 AM >To: Struts Users Mailing List >Subject: [ask] How to

RE: Context parameters not being ignored?

Hi Micael, I think putting a breakpoint on OtherAction.setFooService and probing the full stack trace when the execution hits it for second time would help to reveal what and who's the villain of second injection :) Regards. >-Original Message- >From: Micael Carreira >Sent: Thursday,

RE: default interceptor overriding parent package default interceptor

Hi Steven, We have similar config at showcase [1]. I putted a breakpoint at [2]. It works as expected i.e. for "index" action it hits break point as not a first interceptor but for "skill/save" action it hits it as the first interceptor. Does issue persist with latest Struts 2.3.x version?

RE: Ask - "Reloading all providers." everytime invoce action.

Hi, Sorry this is a bug in 2.5.18 which only occurs in development mode, so, the easiest workaround is to set struts.configuration.xml.reload to false. This bug already has fixed [1] and will be released soon with 2.5.19. Regards. [1] https://issues.apache.org/jira/browse/WW-4974

RE: Apache Struts 2.3.x End-Of-Life (EOL) Announcement

Hi Siva, Yes you need to upgrade to latest released version and you have six months' time to do this. After that, Struts 2.3.x loses any support even security fixes! Thanks for using Struts! Regards. >-Original Message- >From: Gopal, Siva Prakash (US - Mechanicsburg Delivery) > >Sent:

Re: Struts 2.5.x support above Java 8

Hi Paul, I'm pleased to announce it seems we were able to add both java 9 and 11 supports into Struts 2.5.19. Could you please wait for its release and then tests the bits? It currently can pass all tests with all jdks (see [1]) but it's so great if you will be able to test it in production

Re: Not escaping HTML in checkbox Tag

Hi Marc, There is a same question at [1]. Does it's answer satisfy your question? Regards. [1] https://stackoverflow.com/questions/19324332/struts-2-0-allow-html-in-label-of-scheckbox On Nov 16, 2018, at 3:17 PM, Marc Michele mailto:develo...@tiv-consulting.de>> wrote: Hello list, my

RE: Question Regarding Recent Security Announcement

Hi David, That was a typo which already has fixed and re-announced. We meant 1.3.3. Thanks for your email. Regards. >-Original Message- >From: David Dillard >Sent: Sunday, November 4, 2018 9:10 PM >To: user@struts.apache.org >Subject: Question Regarding Recent Security Announcement >

RE: A book of Struts

>From: Lukasz Lenart >Sent: Sunday, October 28, 2018 1:42 PM >To: Struts Users Mailing List >Subject: Re: A book of Struts > >czw., 25 paź 2018 o 15:03 Dave Newton napisał(a): >> I'd probably keep Spring in the first book since basic integration is >> pretty simple, and a lot of people use the

RE: A book of Struts

Wow! No idea but please feel free to count on me (if you liked) on any aspect of the book where I'm able to assist (if you needed or wished any). Kind regards. >-Original Message- >From: Lukasz Lenart >Sent: Wednesday, October 17, 2018 11:08 AM >To: Struts Users Mailing List >Subject:

[ANN] Apache Struts 2.3.36 GA

The Apache Struts group is pleased to announce that Struts 2.3.36 is available as a "General Availability" release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is

Re: Hidden Field Name for Token For Struts 1.3

On 2018/09/25 15:41:47, hanzhid...@gmail.com wrote: > Hi, > Struts version: 1.3 > > Currently our web application is using struts tag on the jsp > page. This tag will generate the html response with the hidden form field > org.apache.struts.taglib.html.TOKEN. This field is used for

RE: Struts2 - multipart/related - HttpServletRequest#getParts not working

multi part request". Regards. >-Original Message- >From: Nikhil P Kookkiri >Sent: Tuesday, October 9, 2018 10:05 AM >To: Struts Users Mailing List ; Yasser Zamani > >Subject: Re: Struts2 - multipart/related - HttpServletRequest#getParts not >working > > >

RE: Struts2 - multipart/related - HttpServletRequest#getParts not working

This isn't Struts issue but your underlying servlet message. Anyway, what about trying Struts itself file upload feature. Then ask that another app to http post the file to a file upload action. Regards. >-Original Message- >From: Nikhil P Kookkiri >Sent: Monday, October 8, 2018 12:37

RE: Issue with migration 2.3.34 to 2.5.17

Please ask such questions at user@struts.apache.org It seems Struts internal CDI has failed due to miss configuration. Please increase log level to debug and look for `textProviderFactory` and `AnnotationActionValidatorManager` in output. Please continue at

RE: Quick question on the patch for CVE-2018-11776

>From: Kiran Ananthpur Bacche (kbacche) >Sent: Friday, August 31, 2018 7:27 AM >To: user@struts.apache.org >Subject: Quick question on the patch for CVE-2018-11776 > >Hi Team, > >Version 2.3.35 is the official patch for this vulnerability. However v2.3.35 >has a >bunch of other fixes too. > >So

Re: [ANN] Apache Struts 2.3.35 GA with Security Fixes Release

Hi there, thank you for posting, As far as I see, it should be already available. For example see [1]. What is the repository URL you wish see Struts 2.3.35 there, please? Regards. [1] http://repo1.maven.org/maven2/org/apache/struts/struts2-core/2.3.35/ On 8/22/2018 6:37 PM, FAGES, Amaury

Re: [ANN] Apache Struts 2.3.35 GA with Security Fixes Release

On 8/22/2018 4:19 PM, Martin Gainty wrote: > Yasser > > which CVE or group of CVEs does this address? Thanks for your posting Martin, This addresses CVE-2018-11776 as I mentioned in it's S2-057's link and announced into user list at [1]. Regards. [1]

[ANN] CVE-2018-11776 Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16

[CVEID]:CVE-2018-11776 [PRODUCT]:Apache Struts [VERSION]:Apache Struts 2.3 to 2.3.34 and 2.5 to 2.5.16 [PROBLEMTYPE]:Remote Code Execution [REFERENCES]:https://cwiki.apache.org/confluence/display/WW/S2-057 [DESCRIPTION]:Man Yue Mo from the Semmle Security Research team was noticed that Apache

[ANN] Apache Struts 2.5.17 GA with Security Fixes Release

The Apache Struts group is pleased to announce that Struts 2.5.17 is available as a “General Availability” release. The GA designation is our highest quality grade. In addition to critical overall proactive security improvements, this release addresses one potential security vulnerability: -

[ANN] Apache Struts 2.3.35 GA with Security Fixes Release

The Apache Struts group is pleased to announce that Struts 2.3.35 is available as a “General Availability” release. The GA designation is our highest quality grade. In addition to critical overall proactive security improvements, this release addresses one potential security vulnerability: -

RE: Struts 2.5 S:Select tag with Multiple True

I wonder why HTML needs CTRL key when we enable multiple! Anyway, I think it's out of Struts business as an HTML issue. Unfortunately Struts Select tag doesn't provide an optional fix for this HTML issue and you've to fix it manually via some javascript coding e.g. save current selected items

Re: http://mybox:8080/struts/hello.action gets HTTP Status 404 - Not Found

On 6/30/2018 4:23 PM, ssmtpmailtesting ssmtpmailtesting wrote: > web.xml => > > "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" > "http://java.sun.com/dtd/web-app_2_3.dtd; > > > > Archetype Created Web Application > > struts2 >

Re: Struts 2

Hello, try browser's developer tools. Open it's network and console tab and then click your add button. Then see if any JavaScript error is in console. Then check network tab and see what's the response for your server action call. I hope these help ☺ Regards. On Jun 22, 2018, at 2:25 AM,

Re: s:fielderror not working in Java 8, WebSphere

On 5/24/2018 6:43 PM, Doug Breaux wrote: > I'm not sure if I misunderstood the threading here, or just missed this test > case, but this one does seem to run the same on IBM Java 8: > > java TestForStruts2 > COPY ME 1: class java.util.LinkedHashMap$LinkedKeySet > COPY ME 2: public abstract int

Re: s:fielderror not working in Java 8, WebSphere

On 5/22/2018 10:54 PM, breaux@ wrote: > 2018-05-22 12:43:24,384 ERROR [freemarker.runtime]: error - Error executing > FreeMarker template > FreeMarker template error: > Java method "AbstractCollection.size()" threw an exception when invoked on > LinkedHashMap$LinkedKeySet object "[]"; see

Re: s:fielderror not working in Java 8, WebSphere

On 5/23/2018 11:29 PM, Doug Breaux wrote: > Looks the same: > > java TestForStruts > COPY ME 1: public abstract int java.util.Set.size() > COPY ME 2: 0 Thanks. Sorry, for last one, could you check: java.util.Map lhm = new java.util.LinkedHashMap<>(); Class c = lhm.getClass();

Re: s:fielderror not working in Java 8, WebSphere

values please. Here I get: COPY ME 1: public abstract int java.util.Set.size() COPY ME 2: 0 On 5/23/2018 11:01 PM, Doug Breaux wrote: > > > On 2018/05/23 18:11:34, Yasser Zamani <yasserzam...@apache.org> wrote: > >> Thanks. Could you also check if your IBM JDK 8 is

Re: s:fielderror not working in Java 8, WebSphere

On 5/23/2018 8:56 PM, Doug Breaux wrote: > This is the latest IBM JDK 8. Or at least the latest that works with our > version WebSphere, but it's very recent. The build date is 20180214. And this > WebSphere cannot use Oracle or OpenJDK. Thanks. Could you also check if your IBM JDK 8 is able

Re: s:fielderror not working in Java 8, WebSphere

On 5/23/2018 5:38 PM, Doug Breaux wrote: > Quite possibly. Hoping somebody here will be able to confirm or give some > additional hints. Could you check with latest version of IBM JDK 8? And are you maybe able to check also with Oracle and OpenJDK 8?

Re: Struts2 login action class seems to be reused

On 5/16/2018 11:51 PM, Prasanth wrote: > Would struts2 call this setRequest method even if the class is implementing > just ServletRequestAware? No. Additionally Struts RequestAware method signature is setRequest(Map request); i.e. it's parameter is Map not ServletRequest. >

Re: Struts2 login action class seems to be reused

On 5/16/2018 7:23 PM, Prasanth Pasala wrote: > Exception: java.lang.IllegalStateException: UT10: Session is invalid > r4yb7BtBx7fwmGbzMhgeyhvSFb3sAp6FhW6m-5Op > at > io.undertow.server.session.InMemorySessionManager$SessionImpl.getAttribute(InMemorySessionManager.java:481 > at >

  1   2   3   >