I am unable to obtain a token during the form upload process. Specifically, I
have tried the following.
・I submitted a form from the browser with "enctype" set to
"multipart/form-data" and used "struts.token.name" as the token name in the
request.
・When executing "getTokenName()" from "TokenHelper" in the
"struts2-core-6.7.2.jar" on the application side, it returns null.
・Upon debugging, I found that "!params.contains("struts.token.name")" in
"TokenHelper.getTokenName()" indicates that the relevant token is not included
in the "params". It seems that the exclusion patterns added to
"DefaultExcludedPatterns" may be affecting this.
・When the "enctype" is set to "application/x-www-form-urlencoded", I am able to
retrieve the token.
As part of upgrading to version 6.7.2, are there any necessary adjustments that
need to be made on the application side?
On 2025/02/04 06:59:20 Lukasz Lenart wrote:
> Hello,
>
> This is a patch release of Struts 6.x.x which contains only
> non-breaking changes. Please take the time and test the bits - any
> help is appreciated. Please report any problems you will spot.
>
> Here are the changes from the previous version:
> https://github.com/apache/struts/releases/tag/STRUTS_6_7_2
>
> Staging Maven repo
> https://repository.apache.org/content/groups/staging/
>
> Standalone artifacts
> https://dist.apache.org/repos/dist/dev/struts/6.7.2/
>
> Release notes
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.7.2
>
>
> Kind regards
> --
> Łukasz
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For
> additional commands, e-mail: dev-h...@struts.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
