This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a change to branch WW-5668-i18n-cache-bounds
in repository https://gitbox.apache.org/repos/asf/struts.git
discard e02aac2e2 WW-5668 Pin explicit serialVersionUID on the localized-text
providers
discard 359759b84 WW-5668 Add missing Javadoc and cache-rebuild coverage for
i18n provider
discard f4f3778bf WW-5668 Keep the localized-text caches transient so the
provider stays serializable
discard d8cd59a42 WW-5668 Add opt-in request-locale resolution consistency to
Dispatcher
discard 020847442 WW-5668 Fix reassignable-lock hazard and add volatile to
i18n cache fields
discard 473c19291 WW-5668 Bound the localized-text provider caches with
configurable size
discard 97f12a5ec WW-5668 Add remove(key) to the OgnlCache abstraction
discard 41197b2c6 WW-5668 docs: implementation plan for bounded i18n caches
and request-locale resolution
discard 99ca024e8 WW-5668 docs: design spec for bounded i18n caches and
request-locale resolution
add 81264063e WW-5659 Resolve lazy interceptor params per invocation
(#1816)
add a07d0e292 docs: add creating-security-bulletins skill, bulletin
template, and triage control-case rule (#1820)
add ac3da67c8 WW-5668 docs: design spec for bounded i18n caches and
request-locale resolution
add 5a4407d8d WW-5668 docs: implementation plan for bounded i18n caches
and request-locale resolution
add 84053aa20 WW-5668 Add remove(key) to the OgnlCache abstraction
add 9199ba567 WW-5668 Bound the localized-text provider caches with
configurable size
add 78c68f347 WW-5668 Fix reassignable-lock hazard and add volatile to
i18n cache fields
add 3e0fac6c8 WW-5668 Add opt-in request-locale resolution consistency to
Dispatcher
add 8a46b934e WW-5668 Keep the localized-text caches transient so the
provider stays serializable
add 08bc37d5d WW-5668 Add missing Javadoc and cache-rebuild coverage for
i18n provider
add 089d9c398 WW-5668 Pin explicit serialVersionUID on the localized-text
providers
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (e02aac2e2)
\
N -- N -- N refs/heads/WW-5668-i18n-cache-bounds (089d9c398)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.../skills/creating-security-bulletins/SKILL.md | 213 ++++
.../bulletin-template.md | 152 +++
.claude/skills/triaging-security-reports/SKILL.md | 10 +-
.../apache/struts2/DefaultActionInvocation.java | 81 +-
.../struts2/factory/DefaultInterceptorFactory.java | 155 ++-
.../interceptor/AbstractFileUploadInterceptor.java | 55 +-
.../interceptor/ActionFileUploadInterceptor.java | 27 +-
...AbstractInterceptor.java => DisableParams.java} | 50 +-
.../struts2/interceptor/InterceptorParams.java | 55 +
.../apache/struts2/interceptor/UploadPolicy.java | 132 ++
.../apache/struts2/interceptor/WithLazyParams.java | 101 +-
.../org/apache/struts2/struts-messages.properties | 4 +
.../struts2/DefaultActionInvocationTest.java | 88 ++
.../factory/DefaultInterceptorFactoryTest.java | 188 +++
.../ActionFileUploadInterceptorTest.java | 411 +++++-
.../struts2/interceptor/DisableParamsTest.java | 60 +
.../struts2/interceptor/LazyParamInjectorTest.java | 160 +++
.../interceptor/LazyParamsAllowlistTest.java | 123 ++
.../apache/struts2/mock/MockLazyInterceptor.java | 63 +-
core/src/test/resources/xwork-sample.xml | 21 +
core/src/test/resources/xwork-test-default.xml | 5 +
...26-07-27-WW-5659-lazy-params-request-scoping.md | 1323 ++++++++++++++++++++
...7-WW-5659-lazy-params-request-scoping-design.md | 368 ++++++
23 files changed, 3730 insertions(+), 115 deletions(-)
create mode 100644 .claude/skills/creating-security-bulletins/SKILL.md
create mode 100644
.claude/skills/creating-security-bulletins/bulletin-template.md
copy
core/src/main/java/org/apache/struts2/interceptor/{AbstractInterceptor.java =>
DisableParams.java} (52%)
create mode 100644
core/src/main/java/org/apache/struts2/interceptor/InterceptorParams.java
create mode 100644
core/src/main/java/org/apache/struts2/interceptor/UploadPolicy.java
create mode 100644
core/src/test/java/org/apache/struts2/factory/DefaultInterceptorFactoryTest.java
create mode 100644
core/src/test/java/org/apache/struts2/interceptor/DisableParamsTest.java
create mode 100644
core/src/test/java/org/apache/struts2/interceptor/LazyParamInjectorTest.java
create mode 100644
core/src/test/java/org/apache/struts2/interceptor/LazyParamsAllowlistTest.java
create mode 100644
docs/superpowers/plans/2026-07-27-WW-5659-lazy-params-request-scoping.md
create mode 100644
docs/superpowers/specs/2026-07-27-WW-5659-lazy-params-request-scoping-design.md
