[
https://issues.apache.org/jira/browse/WW-4957?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16608857#comment-16608857
]
Konstantinos commented on WW-4957:
----------------------------------
I cannot move the Resources folder because it is a shared folder with another
app. Your second solution is exactly what i want, but i tried and it didn't
work because the external resources didn't add it to the bundle. Maybe it is
some problem in the use of StrutsLocalizedTextProvider or in the configuration
of this class in struts.xml. Can you please test it? Thank you.
> Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is
> removed and GlobalLocalizedTextProvider&StrutsLocalizedTextProvider cannot be
> used instead.
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: WW-4957
> URL: https://issues.apache.org/jira/browse/WW-4957
> Project: Struts 2
> Issue Type: Bug
> Components: Core
> Affects Versions: 2.5.17
> Reporter: Konstantinos
> Assignee: Lukasz Lenart
> Priority: Major
> Fix For: 2.6
>
> Original Estimate: 72h
> Remaining Estimate: 72h
>
> I have an application that uses struts version 2.5.10.1. i want to update it
> to version 2.5.17 after the announcement of the Apache Software Foundation
> that Struts 2.5 to 2.5.16 versions are vulnerable to remote attackers. In my
> current version i use a struts-core library class called LocalizedTextUtil to
> load messages from the global message bundle. My code below:
> {code:java}
> private void initialiseMessageBundle() throws InitializationError{
> LOG.info("Loading global messages from " + DEFAULT_RESOURCE);
> URL[] urls;
> try {
> String resourceFolder =
> PropertiesManager.get(Constants.PROP_RESOURCES_FOLDER);
> File file = new File(resourceFolder);
> if (!file.exists() || !file.isDirectory()){
> LOG.error("file not found: path(" +
> Constants.PROP_RESOURCES_FOLDER + ") = " + resourceFolder);
> throw new InitializationError("External resource not found file
> not found");
> } else {
> LOG.debug("resources file: " + file.toURI().toURL());
> }
> URL url = file.toURI().toURL();
> urls = new URL[]{url};
> ClassLoader cl = new URLClassLoader(urls);
> LocalizedTextUtil.setDelegatedClassLoader(cl);
> LocalizedTextUtil.addDefaultResourceBundle("global");
> } catch (MalformedURLException e) {
> throw new InitializationError("MalformedURLException occured during
> the messageBundle initialisation", e);
> }
> LOG.info("Global messages loaded.");
> }
> {code}
>
> After updating the struts version to 2.5.17 the *LocalizedTextUtil* class is
> removed. Although i create a new instance of class
> *GlobalLocalizedTextProvider* and *StrutsLocalizedTextProvider* and used the
> same methods (*setDelegatedClassLoader*,*addDefaultResourceBundle*) my
> messages are not been loaded. Also i create a bean of these classes on
> struts.xml and tried to inject it but again without success. Do you have any
> thought how can i replace the LocalizedTextUtil in my code above?
> Thank you.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
