Multiple struts-config files with wildcards

2006-07-19 Thread Volker Krebs
Hello, I want to specify multiple struts-config files. But I don't want to use comma seperated list like init-param param-nameconfig/param-name param-value /WEB-INF/struts-config.xml, /WEB-INF/struts-config2.xml, /WEB-INF/struts-config3.xml /param-value /init-param I want to

Re: unit testing struts actions

2006-10-26 Thread Volker Krebs
Asthana, Rahul schrieb: We are thinking of designing a unit test plan for our struts based application. We have found in past that Junits for struts action are cumbersome to write and difficult to maintain.Any other suggestions? Winrunner? Try: http://strutstestcase.sourceforge.net/

[struts2] url tag not evaluating OGNL in anchor attribute

2008-06-24 Thread Volker Krebs
Hello, I have the following in my JSP Page: a href='s:url action=myAction anchor=%{name} /' It seems that the anchor attribute is not evaluating the OGNL. I guess it's the same problem like this one: https://issues.apache.org/struts/browse/WW-2015 or is there any reason for not evaluating OGNL

Accessing value stack with jstl

2009-06-30 Thread Volker Krebs
Hello, we recently update from struts 2.0.14 to struts 2.1.6 In struts 2.0.14 org.apache.struts2.dispatcher.StrutsRequestWrapper was delegating to the Value Stack. This meant that in my JSP Page: s:property value=foo/ was the same as ${foo} With struts 2.1.6 this doesn't seem to work. How can I

Re: [S2]Accessing value stack with jstl

2009-07-01 Thread Volker Krebs
Volker Krebs schrieb: Hello, we recently update from struts 2.0.14 to struts 2.1.6 In struts 2.0.14 org.apache.struts2.dispatcher.StrutsRequestWrapper was delegating to the Value Stack. This meant that in my JSP Page: s:property value=foo/ was the same as ${foo} With struts 2.1.6 this doesn't

Re: [S2]Accessing value stack with jstl

2009-07-01 Thread Volker Krebs
Volker Krebs schrieb: Volker Krebs schrieb: Hello, we recently update from struts 2.0.14 to struts 2.1.6 In struts 2.0.14 org.apache.struts2.dispatcher.StrutsRequestWrapper was delegating to the Value Stack. This meant that in my JSP Page: s:property value=foo/ was the same as ${foo

Accessing http header with ognl

2009-09-01 Thread Volker Krebs
Hello, accessing the http header with JSTL is quite easy: ${header} but how can I do it using OGNL ? s:property value=%{request.header.referer} / s:property value=%{header.referer} / Nothing is working. The Problem is that request.getHeader() is never pushed onto the value stack. How can I

Struts2 ScopeInterceptor scope.type end problem

2011-12-08 Thread Volker Krebs
Hello, I've made an small workflow using the ScopeInterceptor. All works fine, but I have one small problem, where I want to discuss a solution. My last action is defined as scope.type=end action name=showConfirmation class=MyAction interceptor-ref name=myScopeStack param

Re: Struts2 ScopeInterceptor scope.type end problem

2011-12-13 Thread Volker Krebs
Hello, yes the problem is that all scope objects managed by the scope Interceptor will be cleared if the scope.type is end. I was looking for a way to copy it to the request, so that I could display a confirmation/summary on the last page involved in my scope. But the ScopyInterceptor does not

Re: Wizard (multipage flow) with Struts 2

2012-02-14 Thread Volker Krebs
Struts2 webflow integration only works with Spring Web Flow 1.0.6 Webflow 2.x does not compile. 2 years ago I tried to refactor the plugin, but then other things became more important. But with a bit of afford regards, Volker http://code.google.com/p/struts2webflow/

JavaScript errors on exception-handling.html

2013-09-05 Thread Volker Krebs
Hello, the Exception Handling Documentation Page http://struts.apache.org/release/2.3.x/docs/exception-handling.html has some JavaScript Errors. I stumbled over this a couple of weeks ago ... and now again. So I thought I'll write it to the list, hoping to reach someone who can fix it.

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Volker Krebs
Am 23.09.2013 11:05, schrieb Christoph Nenning: Just a hint: DMI can be dangerous and we think about removing it. That would force us to do heavy refactorings in all our applications. Removing DMI completely would break a lot of applications. How about white-listing methods ? At the moment

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-23 Thread Volker Krebs
Am 23.09.2013 16:23, schrieb Emi Lu: Good morning, Upgraded from 2.3.15.1 to 15.2, but s:submit problem: (1) jsp: s:form name= loginForm namespace= /Login action = ProcessLoginAction method = post theme=simple s:submit value=Login theme=simple

Re: Url rewriting of .action to .jsp

2013-09-24 Thread Volker Krebs
Am 23.09.2013 20:32, schrieb Lukasz Lenart: 2013/9/23 Paweł Wielgus poulw...@gmail.com: Hi all, I'm using DMI to call input method extensively, almost in every Edit*Action. I call it with ParamsPrepareParams stack. I fully understand that allowing DMI is a security problem. But maybe some kind

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-10-11 Thread Volker Krebs
Hello Lukasz, do you have any news according the 15.3 ? We are waiting for it to update our customer projects. Thanks Volker Am 23.09.2013 20:12, schrieb Lukasz Lenart: Hi, Yes, we know already :\ I'm working on a new solution, should be ready next week.

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-10-11 Thread Volker Krebs
Thank you, good news. If you want you can give me the current state and I can run it on our test system. We're implicitly testing quite a lot of struts2 functionality. Am 11.10.2013 09:33, schrieb Lukasz Lenart: Patch is under review now, so the release should be out next week. Regards

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-10-11 Thread Volker Krebs
Am 11.10.2013 13:22, schrieb Lukasz Lenart: 2013/10/11 Volker Krebs volker.kr...@abas.de: Thank you, good news. If you want you can give me the current state and I can run it on our test system. We're implicitly testing quite a lot of struts2 functionality. That would be awesome, but I

Re: Strict Method Invocation

2015-10-06 Thread Volker Krebs
Am 05.10.2015 um 16:43 schrieb Volker Krebs: > Am 03.10.2015 um 09:35 schrieb Lukasz Lenart: >> Hi, >> >> I have updated docs about the latest SMI addition: >> >> https://cwiki.apache.org/confluence/display/WW/Security#Security-StrictMethodInvocation >> http

Re: Strict Method Invocation

2015-10-05 Thread Volker Krebs
Am 03.10.2015 um 09:35 schrieb Lukasz Lenart: > Hi, > > I have updated docs about the latest SMI addition: > > https://cwiki.apache.org/confluence/display/WW/Security#Security-StrictMethodInvocation >