[
https://issues.apache.org/jira/browse/WW-4988?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16711818#comment-16711818
]
Yasser Zamani commented on WW-4988:
-----------------------------------
Thank you [~JCjA492kH6347Vb10Ja53], yes it is passing security checks after
your upgrade :). I personally had tendency to add show case to reveal if it
works but I concluded with
[DWR-540|https://directwebremoting.atlassian.net/browse/DWR-540]. Fortunately
there wasn't a burden to upgrade to DWR3 to fix that.
> Upgrade DWR from 1.x to 2.x (for DWR plugin)
> --------------------------------------------
>
> Key: WW-4988
> URL: https://issues.apache.org/jira/browse/WW-4988
> Project: Struts 2
> Issue Type: Dependency
> Components: Plugin - DWR
> Affects Versions: 2.6
> Environment: All environments
> Reporter: James Chaplin
> Priority: Minor
> Labels: pull-request-available
> Fix For: 2.6
>
>
> Hello Apache Struts Team.
> There appears to be a failure/warning reported in the automated nightly
> Jenkins builds in relation to the DWR plugin component (reported by
> org.owasp:dependency-check-maven).
> A PR ([https://github.com/apache/struts/pull/283)] has been opened in hopes
> of addressing this by _upgrading the Struts 2.6 DWR plugin to the most recent
> API-compatible version of DWR_ (2.x series).
>
> Since _only manual testing/verification is possible at this time_ (requires
> modification of the showcase application web.xml, see above PR for details),
> _there is a risk that upgrading the DWR dependency might introduce issues for
> the DWR plugin_.
>
> If there is anyone who has _suggestions on creating an automated (preferably
> self-contained) test for the DWR plugin_ within the regression suite please
> advise by commenting on this JIRA.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
