Re: [VOTE] Apache Struts 6.4.0

[Johannes Geppert]

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

#
web: https://www.jgeppert.com
twitter: https://twitter.com/jogep

Am Do., 18. Apr. 2024 um 07:24 Uhr schrieb Lukasz Lenart
:
>
> The Apache Struts 6.4.0 test build is available. With this release the
> following issues were addressed:
>
> Bug
> [WW-5192] - Radio tag not setting enum key values
> [WW-5319] - StrutsUtils is not defined in validation.js
> [WW-5357] - Struts anchor tag doesn't support "disabled" even though
> docs indicate it does
> [WW-5365] - Radio tag does not support value objects of type Boolean
> when setting the default value
> [WW-5373] - CspReportAction JavaDoc wrong
> [WW-5382] - Stale configuration persists after configuration reload
> [WW-5387] - ApplicationMap.remove does not remove the entry from the
> ServletContext
> [WW-5392] - Tiles-Plugin unable to load tiles definition XML if the
> file names are specified with wild char
> [WW-5396] - Javatemplates s:file shows server/file location
> [WW-5403] - Struts 2.5 to 6.x migration issues caused by removal of
> deprecated code within a minor release
>
> New Feature
> [WW-5402] - Auto loading the Tiles definition files from the classpath
> dependent JAR
>
> Improvement
> [WW-5225] - add accessor to the original filename into
> JakartaMultiPartRequest & MultiPartRequestWrapper
> [WW-5328] - Removes deprecated methods from SecurityMemberAccess &
> MemberAccessValueStack
> [WW-5333] - Refactor AttributeMap
> [WW-5338] - Remove deprecated OgnlTool
> [WW-5339] - Mitigate against custom class ASTMap node construction
> [WW-5340] - Introduce optional AST node exclusion list
> [WW-5341] - Ensure exclusion list applies to objects from all ClassLoaders
> [WW-5342] - Block classes in default package
> [WW-5343] - Make SecurityMemberAccess extensible and a prototype bean
> [WW-5346] - CDI Plugin: Replace deprecated BeanManager::createInjectionTarget
> [WW-5348] - Allow overriding of logging behaviour in
> DefaultAcceptedPatternsChecker
> [WW-5349] - Remove core dependency on ognl.ASTVarRef
> [WW-5350] - Implement optional strict class/package allowlist for OGNL
> [WW-5352] - Implement annotation mechanism for injectable fields via 
> parameters
> [WW-5354] - Add actionErrors, actionMessages, fieldErrors to parameter
> excluded patterns
> [WW-5355] - Integrate and use WTLFU cache by default
> [WW-5358] - Expand exclusion list
> [WW-5359] - Improved the StrutsUrlDecoder so that charset retrieval is
> performed only once
> [WW-5360] - Struts 2 and JDK 17 numbers of iterator tag when using
> different locale
> [WW-5362] - Remove type attribute out of  tag
> [WW-5363] - Look up Stack last in Velocity context
> [WW-5364] - Automatically populate OGNL allowlist
> [WW-5369] - Re-define a minimal library set for Struts 6.x
> [WW-5370] - Make HttpParameters case-insensitive
> [WW-5371] - Use action based callback to transfer information about
> uploaded files
> [WW-5374] - CspInterceptor reportUri with context
> [WW-5377] - trouble with Struts tags nested within  one
> [WW-5378] - Add option to not fallback to context lookup when finding
> value in OgnlValueStack
> [WW-5379] - Implement alternative mechanism for Velocity directives to
> obtain stack
> [WW-5381] - Introduce extension points for CompoundRootAccessor and
> MethodAccessor
> [WW-5383] - Exclude JAR files by default when scanning for actions on JDK9+
> [WW-5391] - Add interface for VelocityManager extension point
> [WW-5401] - Adds more logging statements around validating and
> accepting MultiPartRequest
>
> Task
> [WW-5394] - Use request encoding in rest plugin
>
> Dependency
> [WW-5344] - Un-deprecate the Sitemesh plugin and upgrade Sitemesh to ver. 
> 2.5.0
> [WW-5347] - Upgrade to commons-digester3 version 3.2
> [WW-5389] - Upgrade Log4j to version 2.21.1
> [WW-5395] - Upgrade commons-logging:commons-logging from 1.2 to 1.3.0
> [WW-5397] - Upgrade net.sf.jasperreports:jasperreports from 6.20.6 to 6.21.0
> [WW-5398] - Upgrade commons-validator:commons-validator from 1.6 to 1.8.0
> [WW-5399] - Upgrade org.apache.commons:commons-compress from 1.25.0 to 1.26.0
> [WW-5404] - Bump log4j2.version from 2.21.1 to 2.23.1
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.4.0
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_4_0
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.4.0/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, 

Re: [VOTE] Apache Struts 6.3.0

[Johannes Geppert]

> [X] General Availability (GA)

+1 (binding)

Thank you

Johannes

#
web: https://www.jgeppert.com
twitter: https://twitter.com/jogep



Am Fr., 1. Sept. 2023 um 08:44 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 6.3.0 test build is available. With this release the
> following issues were addressed:
>
> Improvement
> [WW-5233] - Include Apache Tiles code base in the Tiles plugin
> [WW-5321] - notify / document about new maxStringLength limitation
> [WW-5327] - Stop using JavaBeans notation for setters in
> SecurityMemberAccess & MemberAccessValueStack
> [WW-5332] - Validate excluded package name list for missing commas
> [WW-5334] - Misc VelocityManager code cleanup
> [WW-5336] - Merge OgnlTool class into StrutsUtil class
> [WW-5337] - Improve performance of excluded classes and packages
>
> Bug
> [WW-5330] - Issue when submitting a form with a textarea containing
> more than 4000 characters.
> [WW-5331] - Access to request attributes via tags is broken
>
> Dependency
> [WW-5315] - Upgrades ASM to version 9.5
> [WW-5316] - Upgrades commons-io to version 2.13.0
> [WW-5317] - Upgrades log4j-api to version 2.20.0
> [WW-5318] - Upgrades slf4j-api to version 2.0.7
> [WW-5320] - finish Reproducible Builds
> [WW-5322] - Upgrade Jackson version to 2.15.2
> [WW-5323] - Upgrade JasperReports to version 6.20.5
> [WW-5325] - Upgrade commons-lang3 to version 2.13.0
> [WW-5329] - Upgrade xstream to version 1.4.20
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_3_0
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.3.0/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.2.0

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Thank you

Johannes

#
web: https://www.jgeppert.com
twitter: https://twitter.com/jogep



Am Mi., 5. Juli 2023 um 12:25 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 6.2.0 test build is available. With this release the
> following issues were addressed:
>
> Bug
> [WW-4434] - datetextfield.ftl is missing
> [WW-5199] - StrutsPrepareFilter and StrutsExecuteFilter do not support
> forwarding to another action
> [WW-5263] - CSP related interceptors have wrong short names
> [WW-5270] - Forwarding from a Struts excluded URL to an Action not working
> [WW-5271] - Select tag NOT working when using list="#{ ... }"
> [WW-5272] - java.lang.UnsupportedOperationException in the Time component
> [WW-5276] - Cleanup method of request is not called
> [WW-5289] - Execute and Wait Interceptor prevents JVM shutdown
> [WW-5295] - s:date ignores LocalTime
> [WW-5296] - Wrong DTD version
> [WW-5301] - Impossible to select alternate default VelocityManager bean
> [WW-5302] - Autogenerated html ID bases on unevaluated value of the
> name/action/method attributes
> [WW-5307] - Confusing documentation about ognl
> [WW-5309] - NamedVariablePatternMatcher throws when pattern begins
> with a variable
> [WW-5310] - s:url does not handle equal sign correctly
> [WW-5311] - NamedVariablePatternMatcher throws an
> IllegalArgumentException when named variable is not the last part of
> the sequence
> [WW-5312] - ExecuteAndWaitInterceptor inconsistent wait processing
> behaviour
>
> New Feature
> [WW-5275] - Allow to configure more flexible Content-Security-Policy
>
> Improvement
> [WW-4404] - Implement HttpInterceptor
> [WW-5196] - Make RequestMap and ApplicationMap to use generics, also
> correct SessionMap to always be of type 
> [WW-5243] - Removes support for
> "struts.mapper.action.prefix.crossNamespaces"
> [WW-5251] - Remove deprecated interfaces used with ServletConfigInterceptor
> [WW-5253] - Remove deprecated methods from DefaultUrlHelper
> [WW-5261] - Refactor TagUtils#getStack()
> [WW-5262] - Extract excluded classes and beans out of struts-default.xml
> [WW-5264] - Extract XSLT result into a dedicated plugin
> [WW-5265] - Allow removal of a single/specific container provider
> [WW-5266] - Add configuration option for a per-file max size for
> multipart requests
> [WW-5268] - Add configuration option to exempt classes from OGNL
> package exclusions
> [WW-5273] - Support fileupload using native Servlet API 3.1 logic
> [WW-5280] - Cleanup NoParameters interfaces
> [WW-5283] - Update Struts Archetypes
> [WW-5285] - Upgrade commons-fileupload to ver 1.5 and add option to
> limit number of accepted files
> [WW-5288] - Make excluded package exemption logic more strict
> [WW-5290] - Refactor ConfigurationManager
> [WW-5292] - Allow overriding of Operations classes in two filter setup
> and assorted clean up
> [WW-5293] - Allow loading XML configuration from other than filesystem
> [WW-5304] - Drop deprecated methods from ActionContext
> [WW-5308] - Add minlength and maxlength to textarea on javatemplates plugin
> [WW-5314] - Do not log warnings for bad user input from
> JakartaMultiPartRequest
>
> Task
> [WW-5278] - Clean up duplicated code across ActionValidatorManagers
> [WW-5279] - Improve readability of XmlConfigurationProvider class
> [WW-5284] - Further clean up ActionValidatorManager implementations
> [WW-5298] - Clean up StrutsVelocityContext
> [WW-5299] - Clean up ActionChainResult
> [WW-5300] - Make Dispatcher methods overridable
>
> Dependency
> [WW-5269] - Upgrade Jackson to version 2.14.1
> [WW-5274] - Mark Pell Multipart plugin as deprecated
> [WW-5277] - Upgrade Freemarker to version 3.2.32
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.2.0
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_2_0
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.2.0/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain 

Re: [VOTE] Struts Maven Archetypes 6.0.0

[Johannes Geppert]

+1 (binding)

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Fr., 24. Feb. 2023 um 08:51 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts Maven Archetypes 6.0.0 test build is now available.
> It includes support for the latest Struts version.
>
> Changes:
> *
> https://github.com/apache/struts-archetypes/releases/tag/STRUTS_ARCHETYPES_6_0_0
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/orgapachestruts-1126
>
> To test them you must specify a new profile in settings.xml:
>
> 
> struts-archetypes
> 
> 
> archetype 
> 
> https://repository.apache.org/content/repositories/orgapachestruts-1126
> 
> 
> true
> fail
> 
> 
> false
> warn
> 
> 
> 
> 
>
> Now you can run the command:
> mvn archetype:generate -Pstruts-archetypes
> -Dfilter=org.apache.struts:struts2
>
> and select each archetype, please select version 6.0.0 to test the
> current test release
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> - The Apache Struts group.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] [FASTTRACK] Apache Struts 6.1.2

[Johannes Geppert]

+1 binding

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Thank you

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Mi., 8. März 2023 um 21:11 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 6.1.2 test build is now available. It includes the
> latest security patch which fixes potential security vulnerability:
> * missing max files upload limit in Commons FileUpload, CVE-2023-24998
>   https://github.com/apache/commons-fileupload/pull/185
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.1.2
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.1.2/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> This is a "fast-track" release vote. If we have a positive vote after
> 24 hours (at least three binding +1s and more +1s than -1s),  the
> release may be submitted for mirroring and announced to the usual
> channels.
>
>
> Regards
> Łukasz
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.1.1

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

Lukasz Lenart  schrieb am Do., 24. Nov. 2022,
20:16:

> The Apache Struts 6.1.1 test build is available. With this release the
> following issues were addressed:
>
> Bug
> [WW-3529] - NamedVariablePatternMatcher does not properly escape characters
> [WW-3737] - Parsing of excludePattern breaks regex
> [WW-4514] - DefaultUrlHelper.buildParametersString appends just ? if
> collection is empty
> [WW-5145] - Checkbox with multiple values do not default correctly
> [WW-5214] - When value for SELECT element is greater than 2147483647,
> the value does not pre-select
> [WW-5238] - Strict Method Invocation (SMI) too strict or wrong
> ActionMapping?
> [WW-5239] - regression btw struts 2.5.30 and 6.0.30 / submit
> s:checkbox unchecked -> NPE
> [WW-5241] -  is generating an invalid url
> when used in conjunction with ExecuteAndWait interceptor
> [WW-5247] - Related to: [WW-5117] - %{id} evaluates different for
> data-* and value attribute
> [WW-5248] - action attribute on submit tag not working as expected
> [WW-5255] -  and  tags are broken
>
> New Feature
> [WW-4173] - Add option to disable a given interceptor
>
> Improvement
> [WW-2815] - No way to configure XStream engine
> [WW-3691] - BackgroundProcess should use a
> java.util.concurrent.Executor alternatively to spawning a new thread
> [WW-3715] - Allow for dynamic validation xml files, by building
> validator cache based on action AND context
> [WW-3725] - Remove unused tag templates from
> core/src/main/resources/template/archive
> [WW-4440] - Add basic README.md to all subprojects
> [WW-4567] - Drop unused dependencies or put a proper scope
> [WW-4692] - Extract encoding logic from UrlHelper into a dedicated bean
> [WW-5133] - Remove deprecated labelposition
> [WW-5137] - Remove class attribute
> [WW-5184] - Add optional parameter value check to ParametersInterceptor
> [WW-5219] - Move TestNGXWorkTestCase from the Core into the TestNG plugin
> [WW-5220] - Move XWorkJUnit4TestCase from the Core into the JUnit plugin
> [WW-5232] - Use Github Actions instead of Travis to build PRs
> [WW-5234] - Normalise DTD definitions
> [WW-5235] - Reduce "OGNL Expression Max Length enabled with 256" log
> entry to trace
> [WW-5240] - doubleOnchange attribute of the doubleselect tag is not
> supported
> [WW-5242] - Make "struts.mapper.action.prefix.crossNamespaces" deprecated
> [WW-5252] - Completely disable external entities declarations in XML config
> [WW-5254] - Document how to use the Async plugin
> [WW-5257] -  output is followed by a newline in simple
> theme (diff to Struts 2)
> [WW-5259] - Extract UrlHelper#parseQueryString into a dedicated plugin
> [WW-5260] - Checkbox tag default value for attribute submitUnchecked
>
> Dependency
> [WW-5213] - Bump javax.el from 3.0.1-b11 to 3.0.1-b12
> [WW-5226] - Upgrade weld-core to version 2.4.8.Final
> [WW-5227] - Upgrade Apache Log4j to version 2.19.0
> [WW-5228] - Upgrade dependency-check-maven from 7.1.2 to 7.2.0
> [WW-5229] - Upgrade Spring to version 5.3.23
> [WW-5230] - Upgrade OGNL to version 3.3.4
> [WW-5231] - Upgrade apache-rat-plugin to version 0.15
> [WW-5244] - Upgrade commons-text to ver. 1.10.0
> [WW-5245] - Upgrade jackson-databind to version 2.13.4.1
> [WW-5258] - Upgrade Struts Annotation to version 1.0.8
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.1.1
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_1_1
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.1.1/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.0.3

[Johannes Geppert]

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Thanks to all contributors!


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Mo., 12. Sept. 2022 um 09:02 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 6.0.3 test build is available. With this release the
> following issues were addressed:
>
> Bug
> [WW-5185] - TilesDefinition is not found and the request for a Struts
> action fails after an upgrade from Struts 2.5.30 to Struts 6.0.
> [WW-5189] - Add missing struts-6.0.dtd
> [WW-5190] - StackOverflowError when dispatching to JSP
> [WW-5191] - template/simple/textarea.ftl not rendering parameters correctly
> [WW-5192] - radiomap.ftl not setting enum key values
> [WW-5194] - UIBean.evaluateParams() throws an IllegalStateException
> when getting the nonce out of a session that has been invalidated.
> [WW-5195] - Dispatcher: Infinite loop with dispatcher FORWARD
> [WW-5197] - java.lang.UnsupportedOperationException in the date component
> [WW-5198] - textarea's maxlength attribute displays in tag's body
> [WW-5203] - lazyPolicyBuilder in DefaultCspSettings is not lazy
> [WW-5205] - REST plugin cannot start due to injection error
> [WW-5207] - Convention Plugin - support for ASM 9
> [WW-5215] - CspInterceptor assumes Session was already created
> [WW-5216] - Freemarker Checkbox error after migrating from Struts
> 2.5.29 to 2.5.30
>
> New Feature
> [WW-5187] - java.lang.NoClassDefFoundError:
> org/apache/struts2/views/velocity/VelocityManager
>
> Improvement
> [WW-5173] - Implement additional OGNL cache configuration controls
> [WW-5188] - Use 6.0 marker instead of 2.6
> [WW-5218] - Allow to disable CSP related interceptors
>
> Dependency
> [WW-5193] - Use proper hibernate-validator groupId and upgrade to
> version 6.1.3.Final
> [WW-5201] - Bump Log4j2 to 2.18.0
> [WW-5202] - Update jasperreports to 6.19.1 and exclude optional itext
> from jasperreports
> [WW-5204] - Upgrade to OGNL 3.3.3
> [WW-5208] - Update hibernate-validator to 6.2.4
> [WW-5212] - Upgrade Spring to version 5.3.22
>
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.3
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_0_3
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.0.3/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [TEST] Struts 6.0.3 test build is ready

[Johannes Geppert]

Tested with AWS serverless and did not see any issues.

Any blockers to release this version?

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Fr., 2. Sept. 2022 um 14:53 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> Hello,
>
> This is the first patch version of Struts 6.x series. Please take the
> time and test the bits - any help is appreciated. Please report any
> problems you will spot.
>
> Here are the changes from the previous 6.0.0 version:
> https://github.com/apache/struts/releases/tag/STRUTS_6_0_3
>
> Staging Maven repo
> https://repository.apache.org/content/groups/staging/
>
> Standalone artifacts
> https://dist.apache.org/repos/dist/dev/struts/6.0.3/
>
> Release notes
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.3
>
>
> Kind regards
> --
> Łukasz
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [TEST] Struts 6.0.2 test build is ready

[Johannes Geppert]

+1 for dedicated stack, but not sure if we should name it "default secure
stack" as it implies that the other stacks are not secure. 

My 2ct on this

Best Regards

Johannes

i...@flyingfischer.ch  schrieb am Mi., 31. Aug.
2022, 14:20:

> Creating a new default secure stack sounds good to me. Thank for
> considering.
>
> As far as I can see there would be 4 additional interceptors in this
> secure stack:
>
> CoepInterceptor.java
> CoopInterceptor.java
> CspInterceptor.java
> FetchMetadataInterceptor.java
>
> And the appropriate resources used by them:
> ResourceIsolationPolicy.java
> StrutsResourceIsolationPolicy.java
>
> Best regards
> Markus
>
>
> Am 31.08.22 um 14:11 schrieb Lukasz Lenart:
> > I think disabling them doesn't make sense - these are just
> > interceptors so you can create your own stack without them. I would
> > rather create a new default secure stack and move those interceptors
> > into that stack, wdyt?
> >
> >
> > Regards
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [TEST] Struts 6.0.2 test build is ready

[Johannes Geppert]

Hi Lukasz,

I can confirm that 6.0.2 works well with the aws serverless integration.

Thanks for the new release.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Do., 25. Aug. 2022 um 07:52 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> Hello,
>
> This is the first patch version of Struts 6.x series. Please take the
> time and test the bits - any help is appreciated. Please report any
> problems you will spot.
>
> Here are the changes from the previous 6.0.0 version:
> https://github.com/apache/struts/releases/tag/STRUTS_6_0_2
>
> Staging Maven repo
> https://repository.apache.org/content/groups/staging/
>
> Standalone artifacts
> https://dist.apache.org/repos/dist/dev/struts/6.0.2/
>
> Release notes
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.2
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.0.1

[Johannes Geppert]

Thanks a lot Lukasz!

Lukasz Lenart  schrieb am Di., 23. Aug. 2022,
20:33:

> Fix under way
> https://github.com/apache/struts/pull/590
>
> wt., 23 sie 2022 o 20:22 Lukasz Lenart 
> napisał(a):
> >
> > Ok, this looks like a bug in CspInterceptor and connected
> > DefaultCspSettings - it assumes the session already exists which isn't
> > true
> > https://issues.apache.org/jira/browse/WW-5215
> >
> > I will prepare a fix and then issue a new 6.0.2 release.
> >
> > Thanks!
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > wt., 23 sie 2022 o 14:05 Johannes Geppert  napisał(a):
> > >
> > > no, unfortunately not. I have already tried both versions.
> > >
> > > #
> > > web: http://www.jgeppert.com
> > > twitter: http://twitter.com/jogep
> > >
> > >
> > >
> > > Am Di., 23. Aug. 2022 um 13:41 Uhr schrieb Lukasz Lenart <
> > > lukaszlen...@apache.org>:
> > >
> > > > wt., 23 sie 2022 o 13:37 Johannes Geppert 
> napisał(a):
> > > > >
> > > > > Hi Lukasz,
> > > > >
> > > > > I just checked if it is easy to migrate the AWS serverless
> implementation
> > > > > <https://github.com/awslabs/aws-serverless-java-container> from
> Struts2
> > > > to
> > > > > 6.0.0.
> > > > > Unfortunately it looks like the session handling has changed a bit
> and
> > > > > raises a null pointer exception.
> > > > >
> > > > > ERROR DefaultDispatcherErrorHandler Exception occurred during
> processing
> > > > > request: null
> > > > >  java.lang.NullPointerException
> > > > > at
> > > > >
> > > >
> com.amazonaws.serverless.proxy.internal.servlet.AwsHttpServletRequest.getSession(AwsHttpServletRequest.java:139)
> > > > > at
> > > > >
> > > >
> javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:270)
> > > > > at
> org.apache.struts2.dispatcher.SessionMap.put(SessionMap.java:171)
> > > > > at
> > > > >
> > > >
> org.apache.struts2.interceptor.csp.DefaultCspSettings.associateNonceWithSession(DefaultCspSettings.java:83)
> > > > > at
> > > > >
> > > >
> org.apache.struts2.interceptor.csp.DefaultCspSettings.addCspHeaders(DefaultCspSettings.java:71)
> > > > > at
> > > > >
> > > >
> org.apache.struts2.interceptor.csp.CspInterceptor.beforeResult(CspInterceptor.java:49)
> > > > > at
> > > > >
> > > >
> com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:274)
> > > > >
> > > > > Any idea about the root cause and hint to the possible change?
> > > >
> > > > Does it work with 6.0.0? And it's  probably related to this change
> > > > https://issues.apache.org/jira/browse/WW-5203
> > > >
> > > > So maybe it need to be reverted
> > > >
> > > >
> > > > Regards
> > > > --
> > > > Łukasz
> > > > + 48 606 323 122 http://www.lenart.org.pl/
> > > >
> > > > -
> > > > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > > > For additional commands, e-mail: dev-h...@struts.apache.org
> > > >
> > > >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.0.1

[Johannes Geppert]

no, unfortunately not. I have already tried both versions.

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Di., 23. Aug. 2022 um 13:41 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> wt., 23 sie 2022 o 13:37 Johannes Geppert  napisał(a):
> >
> > Hi Lukasz,
> >
> > I just checked if it is easy to migrate the AWS serverless implementation
> > <https://github.com/awslabs/aws-serverless-java-container> from Struts2
> to
> > 6.0.0.
> > Unfortunately it looks like the session handling has changed a bit and
> > raises a null pointer exception.
> >
> > ERROR DefaultDispatcherErrorHandler Exception occurred during processing
> > request: null
> >  java.lang.NullPointerException
> > at
> >
> com.amazonaws.serverless.proxy.internal.servlet.AwsHttpServletRequest.getSession(AwsHttpServletRequest.java:139)
> > at
> >
> javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:270)
> > at org.apache.struts2.dispatcher.SessionMap.put(SessionMap.java:171)
> > at
> >
> org.apache.struts2.interceptor.csp.DefaultCspSettings.associateNonceWithSession(DefaultCspSettings.java:83)
> > at
> >
> org.apache.struts2.interceptor.csp.DefaultCspSettings.addCspHeaders(DefaultCspSettings.java:71)
> > at
> >
> org.apache.struts2.interceptor.csp.CspInterceptor.beforeResult(CspInterceptor.java:49)
> > at
> >
> com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:274)
> >
> > Any idea about the root cause and hint to the possible change?
>
> Does it work with 6.0.0? And it's  probably related to this change
> https://issues.apache.org/jira/browse/WW-5203
>
> So maybe it need to be reverted
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts 6.0.1

[Johannes Geppert]

Hi Lukasz,

I just checked if it is easy to migrate the AWS serverless implementation
 from Struts2 to
6.0.0.
Unfortunately it looks like the session handling has changed a bit and
raises a null pointer exception.

ERROR DefaultDispatcherErrorHandler Exception occurred during processing
request: null
 java.lang.NullPointerException
at
com.amazonaws.serverless.proxy.internal.servlet.AwsHttpServletRequest.getSession(AwsHttpServletRequest.java:139)
at
javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:270)
at org.apache.struts2.dispatcher.SessionMap.put(SessionMap.java:171)
at
org.apache.struts2.interceptor.csp.DefaultCspSettings.associateNonceWithSession(DefaultCspSettings.java:83)
at
org.apache.struts2.interceptor.csp.DefaultCspSettings.addCspHeaders(DefaultCspSettings.java:71)
at
org.apache.struts2.interceptor.csp.CspInterceptor.beforeResult(CspInterceptor.java:49)
at
com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:274)

Any idea about the root cause and hint to the possible change?

Best Regards

Johannes




#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Di., 23. Aug. 2022 um 09:57 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 6.0.1 test build is available. With this release the
> following issues were addressed:
>
> Bug
> [WW-5185] - TilesDefinition is not found and the request for a Struts
> action fails after an upgrade from Struts 2.5.30 to Struts 6.0.
> [WW-5189] - Add missing struts-6.0.dtd
> [WW-5190] - StackOverflowError when dispatching to JSP
> [WW-5191] - template/simple/textarea.ftl not rendering parameters correctly
> [WW-5192] - radiomap.ftl not setting enum key values
> [WW-5194] - UIBean.evaluateParams() throws an IllegalStateException
> when getting the nonce out of a session that has been invalidated.
> [WW-5195] - Dispatcher: Infinite loop with dispatcher FORWARD
> [WW-5197] - java.lang.UnsupportedOperationException in the date component
> [WW-5198] - textarea's maxlength attribute displays in tag's body
> [WW-5203] - lazyPolicyBuilder in DefaultCspSettings is not lazy
> [WW-5205] - REST plugin cannot start due to injection error
> [WW-5207] - Convention Plugin - support for ASM 9
>
> New Feature
> [WW-5187] - java.lang.NoClassDefFoundError:
> org/apache/struts2/views/velocity/VelocityManager
>
> Improvement
> [WW-5188] - Use 6.0 marker instead of 2.6
>
> Dependency
> [WW-5193] - Use proper hibernate-validator groupId and upgrade to
> version 6.1.3.Final
> [WW-5201] - Bump Log4j2 to 2.18.0
> [WW-5202] - Update jasperreports to 6.19.1 and exclude optional itext
> from jasperreports
> [WW-5204] - Upgrade to OGNL 3.3.3
> [WW-5208] - Update hibernate-validator to 6.2.4
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.1
>
> Github release
> * https://github.com/apache/struts/releases/tag/STRUTS_6_0_1
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/6.0.1/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Apache Struts ver. 6.0.0

[Johannes Geppert]

Wow! That's a long list of improvements and major milestone! Thanks to
everyone who contributed to this release!

+1 binding

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Best Regards

Johannes

Lukasz Lenart  schrieb am Do., 2. Juni 2022, 10:05:

> The Apache Struts ver. 6.0.0 aka Apache Struts 2 ver. 2.6.0 test build
> is available. With this release the following areas were addressed:
>
> Version change:
> You can be surprised by the version change, previously we have been
> using Struts 2.5.x versioning schema, but this was a bit misleading.
> Struts 2 is a different framework than Struts 1 and its versioning is
> supposed to start with 1.0.0, yet that never happened. With each
> breaking changes release (like Struts 2.5), we had been only upgrading
> the MINOR part of the versioning schema. To fix that problem as from
> Struts 2 ver. 6.0.0  (aka Struts 2.6) we adopt a proper SemVer to
> avoid such confusion.
>
> Internal Changes:
> The framework requires Java 8 at runtime. Also Servlet API 3.1 capable
> container is required.
> OGNL expressions are limited to 256 characters by default. See WW-5179
> - Set 'struts.ognl.expressionMaxLength' to 256 by default RESOLVED and
> docs for more details.
> Yasser's PR has been merged which contains a fix to double evaluation
> security vulnerability - it should solve any future attack vectors,
> yet it can impact your application if you have been depending on
> double evaluation. How to test:
> Run all your app tests, you shouldn't see any WARN log like below:
> Expression [so-and-so] isn't allowed by pattern [so-and-so]! See
> Accepted / Excluded patterns at https://struts.apache.org/security/
> See if following components are still functioning correctly regarding
> java-scripts:
> - forms with client side validations
> - doubleselect
> - combobox
> Check also StreamResults, AliasInterceptors and JasperReportResults if
> they are still working as expected.
> Support to access static methods via OGNL expressions has been
> removed, use action instance methods instead.
>
> Bug
> [WW-3534] - PrepareOperations.createActionContext does not detect
> existing context correctly
> [WW-3730] - action tag accepts only String arrays as parameters
> [WW-4723] - s:url incompatible with JDK 1.5
> [WW-4742] - Problem with escape when the key from getText has no value
> [WW-4865] - Struts s:checkbox conversion fails to List
> [WW-4866] - ASM 5.2 and Java 9 leads to IllegalArgumentException
> [WW-4897] - KEYS, sigs and hashes should use https (SSL)
> [WW-4902] - Struts 2 fails to init Dispatcher - Tomcat Embedded
> [WW-4928] - Setting struts.devMode from system property not working as
> described
> [WW-4930] - SMI cannot be diasabled for action-packages found via the
> convention-plugin
> [WW-4941] - [jar_cache] Some jar_cache**.tmp files are generated
> into a temporary directory(/tmp) during web service start
> [WW-4943] - opensymphony.xwork2.util.LocalizedTextUtil can't get i18n
> resources
> [WW-4944] - Struts 2 REST Tiles integration issue
> [WW-4945] - TagUtils#buildNamespace should throw an exception when
> invocation is null
> [WW-4946] - Strtus 2 spring integrations is failing - fails to init
> Dispatcher - Tomcat Embedded
> [WW-4948] - Struts 2.5.16 is creating jar_cache files in temp folder
> [WW-4951] - MD5 and SHA1 should no longer be provided on download pages
> [WW-4954] - xml-validation fails since struts 2.5.17
> [WW-4957] - Update struts version from 2.5.10 to 2.5.17.
> LocalizedTextUtil class is removed and
> GlobalLocalizedTextProvider cannot be used
> instead.
> [WW-4958] - File upload fails from certain clients
> [WW-4964] - Missing javascript in form-validate.ftl
> [WW-4968] - combining s:set and s:property where the property
> retrieved is null has unexpected results
> [WW-4971] - s:include tag fails with truncated content in certain
> circumstances
> [WW-4974] - NullPointerException in
> DefaultStaticContentLoader#findStaticResource
> [WW-4977] - Fixing flaky test in Jsr168DispatcherTest and
> Jsr286DispatcherTest
> [WW-4984] - Static files like css and js files in struts-core not
> properly served
> [WW-4986] - Race condition reloading config results in actions not found
> [WW-4987] - Setting Struts2  options Css Class
> [WW-4991] - Not existing property in listValueKey throws exception
> [WW-4997] -  can't be resolved
> [WW-4999] - Can't get OgnlValueStack log even if enable
> logMissingProperties
> [WW-5002] - Package Level Properties in Global Results
> [WW-5004] - No more calling of a static variable in Struts 2.8.20 available
> [WW-5006] - NullPointerException in ProxyUtil class when accessing static
> member
> [WW-5009] - EmptyStackException in JSON plugin due to concurrency
> [WW-5011] - Tiles bug when parsing file:// URLs including # as part of the
> URL
> [WW-5013] - Accessing static variable via OGNL returns nothing
> [WW-5022] - Struts 2.6 escaping behaviour change for s:a (anchor) tag
> [WW-5024] - 

Re: [VOTE] Struts 2.5.29

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

Lukasz Lenart  schrieb am Di., 18. Jan. 2022,
14:45:

> The Apache Struts 2.5.29 test build is available. With this release
> the following issues were addressed:
>
> Bug
> [WW-5117] - %{id} evaluates different for data-* and value attribute
> [WW-5160] - Template not found for name
> "Empty{name='templateDir'}/simple/hidden.ftl"
> [WW-5163] - Error executing FreeMarker template
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.29
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.29/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [TEST] Struts 2 ver. 6.0.0-RC1 test build is ready

[Johannes Geppert]

Awesome! Thanks Lukasz for starting with this.

This release notes contains a lot of changes. Are they all related to this
release?

Best Regards

Johannes

Lukasz Lenart  schrieb am So., 19. Dez. 2021,
13:58:

> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report any problems. I'll call for a vote in a few days if no problems
> will be spotted.
>
> Staging Maven repo
> https://repository.apache.org/content/groups/staging/
>
> Standalone artifacts
> https://dist.apache.org/repos/dist/dev/struts/6.0.0-RC1/
>
> Release notes
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.0
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] [FASTTRACK] Apache Struts 2.5.28.1

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

Lukasz Lenart  schrieb am Do., 16. Dez. 2021,
16:46:

> The Apache Struts 2.5.28.1 test build is now available. It includes
> the latest security patch which fixes security vulnerability:
>
> - Log4j has been upgrade to version 2.12.2 to address security
> vulnerability CVE-2021-45046
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.28.1
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.28.1/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> This is a "fast-track" release vote. If we have a positive vote after
> 24 hours (at least three binding +1s and more +1s than -1s),  the
> release may be submitted for mirroring and announced to the usual
> channels.
>
>
> Regards
> Łukasz
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.28

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

Lukasz Lenart  schrieb am Di., 7. Dez. 2021, 20:41:

> The Apache Struts 2.5.28 test build is available. With this release
> the following issues were addressed:
>
> Bug
> [WW-5149] - labelposition and 2.5.27
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.28
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.28/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Deprecating plugins

[Johannes Geppert]

Sitemesh was quite nice at the times, but looks like it's not developed
anymore.

So +1 for removing this plugins.

Best Regards

Johannes

Lukasz Lenart  schrieb am Di., 16. Nov. 2021,
20:19:

> Hi,
>
> With incoming Struts 2.6 (aka Struts 2 6.x) I would like to deprecated
> the following plugins:
> - OVal
> - Portlet (+mocks +tiles)
> - GXP
> - OSGi
> - Plexus
> - Sitemesh
>
> Do you have anything against that?
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.27

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

Lukasz Lenart  schrieb am Di., 2. Nov. 2021, 07:07:

> The Apache Struts 2.5.27 test build is available. With this release
> the following issues were addressed:
>
> Bug
> [WW-5116] - PostbackResult uses wrong regex range
> [WW-5117] - %{id} evaluates different for data-* and value attribute
> [WW-5119] - Blocking Threads in retrieving text from resource bundle
> [WW-5121] - Contention when injecting Scope.SINGLETON instances
> [WW-5123] - CheckboxTag value missing for labelposition
> [WW-5125] - forbidden name attribute values (size, clone...?) in
>  using the default theme
> [WW-5130] - ID param not being set
>
> Improvement
> [WW-5132] - Make labelposition deprecated
> [WW-5136] - Make class attribute deprecated
> [WW-5138] - Fix the compilation alarms of deprecated methods
>
> Task
> [WW-5118] - OGNL long conversion
>
> Dependency
> [WW-5122] - Upgrade XStream to version 1.4.16
>
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.27
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.27/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.26

[Johannes Geppert]

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Mi., 2. Dez. 2020 um 20:18 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 2.5.26 test build is available. With this release
> the following issues were addressed:
>
> Bug
> [WW-5095] - Junit plugin does not push ACTION_MAPPING into the context
> resulting in NPE
> [WW-5096] - Struts2 StaticParametersInterceptor's
> addParametersToContext method is not working as expected.
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.26
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.26/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Maven Archetypes 2.5.22

[Johannes Geppert]

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


Am Do., 2. Juli 2020 um 07:31 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts Maven Archetypes 2.5.2 test build is now available.
> It includes support for the latest Struts version.
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/orgapachestruts-1100/
>
> To test them you must specify a new profile in settings.xml:
>
> 
> struts-archetypes
> 
> 
> archetype 
> 
> https://repository.apache.org/content/repositories/orgapachestruts-1100/
> 
> 
> true
> fail
> 
> 
> false
> warn
> 
> 
> 
> 
>
> Now you can run the command:
> mvn archetype:generate -Pstruts-archetypes
> -Dfilter=org.apache.struts:struts2
>
> and select each archetype, please select version 2.5.22 to test the
> current test release
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> This is a "fast-track" release vote. If we have a positive vote after
> 24 hours (at least three binding +1s and more +1s than -1s),  the
> release may be submitted for mirroring and announced to the usual
> channels.
>
> The website download link will include the mirroring timestamp
> parameter [1], which limits the selection of mirrors to those that
> have been refreshed since the indicated time and date. (After 24
> hours, we *must* remove the timestamp parameter from the website link,
> to avoid unnecessary server load.) In the case of a fast-track
> release, the email announcement will not link directly to
> , but to , so that we can control use of
> the timestamp parameter.
>
> [1] http://apache.org/dev/mirrors.html#use
>
> - The Apache Struts group.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Annotations 1.0.7

[Johannes Geppert]

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Best Regards

Johannes

Lukasz Lenart  schrieb am Mo., 17. Feb. 2020,
21:19:

> The Struts Annotations 1.0.7 test build is now available as a Maven
> artifact.
>
> This version splits generation of Struts tags info into a file with
> description and a file with attributes - this will allow include those
> files during site generation.
>
> To test this version you can upgrade Struts Annotations in the Struts
> project and build the project - instead one .html file there
> should be two files: -attributes.html and -description.html
>
> https://repository.apache.org/content/repositories/orgapachestruts-1098
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> I also assume a silent consensus after this period.
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.22

[Johannes Geppert]

Thanks for all the work guys!

+1

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Di., 26. Nov. 2019 um 09:32 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Apache Struts 2.5.22 test build is now available. With this
> release the following issues were addressed:
>
> Internal Changes
> Please be aware of new security enhancements added to the version of
> Struts, they are disabled by default but please consider enabling them
> to increase safety of you application. You will find more details in
> our Security Guide.
>
> Bug
> [WW-4958] - File upload fails from certain clients
> [WW-4991] - Not existing property in listValueKey throws exception
> [WW-4999] - Can't get OgnlValueStack log even if enable
> logMissingProperties
> [WW-5004] - No more calling of a static variable in Struts 2.8.20 available
> [WW-5006] - NullPointerException in ProxyUtil class when accessing static
> member
> [WW-5009] - EmptyStackException in JSON plugin due to concurrency
> [WW-5011] - Tiles bug when parsing file:// URLs including # as part of the
> URL
> [WW-5013] - Accessing static variable via OGNL returns nothing
> [WW-5024] - HttpParameters.Builder can wrap objects in two layers of
> Parameters
> [WW-5025] - Binding Integer Array upon form submission
> [WW-5026] - Double-submit of TokenSessionStoreInterceptor broken since
> 2.5.16
> [WW-5027] - xerces tries to load resources from the internet
> [WW-5028] - Dispatcher prints stacktraces directly to the console
> [WW-5029] - The content allowed-methods tag of the XML configuration
> is sometimes truncated
> [WW-5031] - OGNL: An illegal reflective access operation has occurred
> [WW-5040] - java.lang.reflect.InvocationTargetException - Class:
> com.opensymphony.xwork2.inject.ContainerImpl$ConstructorInjector
>
> New Feature
> [WW-5005] - Struts2 convention plugin lacks Java 11 support
>
> Improvement
> [WW-5023] - Upgrade SLF4J to latest 1.7.x version
> [WW-5034] - Minor enhancement/fix to AbstractLocalizedTextProvider
> [WW-5035] - Provide mechanism to clear OgnlUtil caches
>
> Task
> [WW-5015] - Struts 2 unit testing using StrutTestCase class
>
> Dependency
> [WW-5007] - Upgrade Jackson library to the latest version
> [WW-5008] - Upgrade to OGNL version 3.1.22
> [WW-5033] - Update a few Struts 2.5.x libraries to more recent versions
> [WW-5037] - Upgrade commons-beanutils to version 1.9.4
> [WW-5038] - Upgrade jackson-databind to version 2.9.9.3
> [WW-5041] - Upgrade to OGNL 3.1.26 and adapt to its new features
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.22
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.22/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Would we need to achieve better place in trends ranking?

[Johannes Geppert]

In my first tests it looks like Struts2 is not to heavy to run as a lambda
function.
In fact the bundled jar is smaller than a similar Spring Boot version and
the used memory is lower as well.

See my small comparison between these both serverless solutions:
https://www.jgeppert.com/2018/05/serverless-aws-lambda-performance-of-apache-struts2-vs-spring-boot/

Best Regards

Johannes

>
> >> Thank you. I need to explore into uSvcs to reveal if S2 need to/can be
> >> used in such trends e.g. clouds.
> >>
> >
> >"Clouds" are just servers-not-on-site. It's too heavy for serverless
> (IMO, at least
> >as it stands right now), and it can already be deployed on any reasonable
> >infrastructure.
>
> Fortunately I discovered there is already a cloud plugin for Struts [1].
>
> Regards.
>

Re: [VOTE] Struts Master 13

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Binding

Best Regards

Johannes

Lukasz Lenart  schrieb am Do., 27. Sep. 2018,
08:48:

> The Struts Master 13 test build is now available as a Maven artifact.
>
> https://repository.apache.org/content/groups/staging/org/apache/struts/struts-master/13/
>
> Release notes:
> * uses a proper profile to prepare a release, "apache-release" instead
> of "release"
>
> If you have had a chance to review the test build, please respond with
> a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Master 12

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Do., 23. Aug. 2018 um 14:12 Uhr schrieb Lukasz Lenart <
lukaszlen...@apache.org>:

> The Struts Master 12 test build is now available as a Maven artifact.
>
> https://repository.apache.org/content/groups/staging/org/apache/struts/struts-master/12/
>
> Release notes:
> * uses the latest version of Apache Parent - version 21 - which
> contains new versions of plugins and generates sha256 signatures
> during the release process (this is a requirement)
>
> If you have had a chance to review the test build, please respond with
> a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.3.35

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 (binding)

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep



Am Mo., 20. Aug. 2018 um 07:31 Uhr schrieb Yasser Zamani <
yasserzam...@apache.org>:

> The Apache Struts 2.3.35 test build is now available. In addition to
> critical
>  overall proactive security improvements, it includes the latest security
> patch
>  which fixes one possible vulnerability:
> - Possible Remote Code Execution when using results with no namespace.
>
> For details and the rationale behind these changes, please consult the
> corresponding security bulletins:
> * https://cwiki.apache.org/confluence/display/WW/S2-057
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.35
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.3.35/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> This is a "fast-track" release vote. If we have a positive vote after
> 24 hours (at least three binding +1s and more +1s than -1s),  the
> release may be submitted for mirroring and announced to the usual
> channels.
>
> The website download link will include the mirroring timestamp
> parameter [1], which limits the selection of mirrors to those that
> have been refreshed since the indicated time and date. (After 24
> hours, we *must* remove the timestamp parameter from the website link,
> to avoid unnecessary server load.) In the case of a fast-track
> release, the email announcement will not link directly to
> , but to , so that we can control use of
> the timestamp parameter.
>
> [1] http://apache.org/dev/mirrors.html#use
>
> - The Apache Struts group.
>
>
> Regards.
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.16

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2018-03-13 8:46 GMT+01:00 Greg Huber :

> [ x] General Availability (GA)
>
> +1 (b)
>
> Cheers Greg
>
> On 13 March 2018 at 06:23, Lukasz Lenart  wrote:
>
> > The Apache Struts 2.5.16 test build is now available. With this
> > release the following issues were addressed:
> >
> > Bug
> >
> > [WW-4546] - unclosed instantiation of PrintWriter
> > [WW-4741] - Http Sessions forcefully created for all requests using
> > I18nInterceptor with default Storage value.
> > [WW-4873] - NotSerializableException -
> > org.apache.struts2.dispatcher.StrutsRequestWrapper
> > [WW-4900] - NotSerializableException:
> > com.opensymphony.xwork2.inject.ContainerImpl$ConstructorInjector when
> > using ExecuteAndWait interceptor
> > [WW-4901] - ClassCastException in JarEntryRevision
> > [WW-4903] - Dependency Mapping Exception When Using
> > PrefixBasedActionProxyFactory
> > [WW-4906] - The converter() method of
> > com.opensymphony.xwork2.conversion.annotations.TypeConversion is now
> > deprecated. If this method is removed in some next release, it will
> > forbid to describe a converter by the name (id) of a Spring bean.
> > [WW-4908] - Conversion by annotation does not work
> > [WW-4909] - List of Boolean is not populated in Action class
> > [WW-4911] - JSONResult exception in struts2-json-plugin-2.5.14.1.jar
> > [WW-4918] - buttons with name="method:METHODNAME" sometimes ignore
> > global-allowed-methods defined in struts.xml
> > [WW-4920] - Could not create JarEntryRevision for [zip:C:/ unknown
> > protocol c
> > [WW-4921] - NPE in I18nInterceptor$SessionLocaleHandler.read
> > [WW-4923] - JasperReportResult: NPE When Not Using SQL Connection
> >
> > New Feature
> >
> > [WW-4907] - support JSR 303 Validation Groups in BeanValidation-Plugin
> >
> > Improvement
> >
> > [WW-4891] - Debug tag should not display anything when not in dev mode
> > [WW-4905] - Allow using of Initializable interface on an implementation
> > level
> > [WW-4912] - Allowed methods inheritance
> > [WW-4922] - Allow use Jackson XML bindings to serialise / deserialise XML
> >
> > Task
> >
> > [WW-4913] - when using an custom array as a filed in struts 2 action
> > form textfiled data from jsp page in not populating into custom array
> > but populating in String array or array list
> >
> > Dependency
> >
> > [WW-4899] - Upgrade Spring to version 4.3.13
> > [WW-4914] - Update Log4j2 to 2.10.0
> >
> > Release notes:
> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.16
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/2.5.16/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > The vote will remain open for at least 72 hours, longer upon request.
> > A vote can be amended at any time to upgrade or downgrade the quality
> > of the release based on future experience. If an initial vote
> > designates the build as "Beta", the release will be submitted for
> > mirroring and announced to the user list. Once released as a public
> > beta, subsequent quality votes on a build may be held on the user
> > list.
> >
> > As always, the act of voting carries certain obligations. A binding
> > vote not only states an opinion, but means that the voter is agreeing
> > to help do the work.
> >
> >
> > Kind regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
> >
>

Re: [VOTE] Struts Maven Archetypes 2.5.14

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2018-01-30 11:33 GMT+01:00 Aleksandr Mashchenko :

> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 binding
>
> ---
> Regards,
> Aleksandr
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.5.14.1

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-11-29 19:26 GMT+01:00 Lukasz Lenart :

> The Apache Struts 2.5.14.1 test build is now available. It includes
> the latest security patch which fixes one possible vulnerability:
>
> - A crafted JSON request can be used to perform a DoS attack when
> using the Struts REST plugin
> - Vulnerability in the Jackson JSON library
>
> For details and the rationale behind these changes, please consult the
> corresponding security bulletins:
> * https://cwiki.apache.org/confluence/display/WW/S2-054
> * https://cwiki.apache.org/confluence/display/WW/S2-055
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.14.1
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.14.1/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> This is a "fast-track" release vote. If we have a positive vote after
> 24 hours (at least three binding +1s and more +1s than -1s),  the
> release may be submitted for mirroring and announced to the usual
> channels.
>
> The website download link will include the mirroring timestamp
> parameter [1], which limits the selection of mirrors to those that
> have been refreshed since the indicated time and date. (After 24
> hours, we *must* remove the timestamp parameter from the website link,
> to avoid unnecessary server load.) In the case of a fast-track
> release, the email announcement will not link directly to
> , but to , so that we can control use of
> the timestamp parameter.
>
> [1] http://apache.org/dev/mirrors.html#use
>
> - The Apache Struts group.
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.14

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-11-21 8:10 GMT+01:00 Stefaan Dutry :

> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
> Regards
>
> Stefaan Dutry (sdutry)
>
> 2017-11-21 8:03 GMT+01:00 Lukasz Lenart :
> > 2017-11-20 13:36 GMT+01:00 Lukasz Lenart :
> >> [ ] Leave at test build
> >> [ ] Alpha
> >> [ ] Beta
> >> [X] General Availability (GA)
> >
> > +1 (binding)
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.5.13

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-09-04 13:54 GMT+02:00 i...@flyingfischer.ch :

> Am 04.09.2017 um 12:07 schrieb Lukasz Lenart:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> Works already perfect in production.
>
> Markus
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Documentation

[Johannes Geppert]

I agree, looks much better than before!

Just wonder why in the log setup the reference is to log4j instead to
log4j2 implementation.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-04-06 13:15 GMT+02:00 Christoph Nenning 
:

> > > 2017-02-02 20:32 GMT+01:00 Aleksandr Mashchenko
> :
> > >> Maybe this can help: http://www.viaboxx.de/code/confluence2md/
> > >
> > > Thanks, I was able to use it but it exports everything directly into
> > > one file :\ but I can still used to start working on new Getting
> > > started guide :)
> >
> > This tool isn't perfect but at least it allows to start with something
> ;-)
> > I have exported the Getting started guide [1] and adjusted one page
> > [2] to see how it works. Let me know what do you think?
> >
> > [1] http://struts.apache.org/getting-started/
> > [2] http://struts.apache.org/getting-started/how-to-create-a-
> > struts2-web-application.html
> >
> >
>
>
> It's awesome !!!
> Looks much better than before!
>
>
> new:
> http://struts.apache.org/getting-started/how-to-create-
> a-struts2-web-application.html
>
> old:
> http://struts.apache.org/docs/create-struts-2-web-
> application-using-maven-to-manage-artifacts-and-to-build-
> the-application.html
>
>
> One thing I noticed is the old version contains a navigation block with
> next and prev links at the bottom. That seems to be missing in new
> version.
>
>
> Regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>

Re: [CLOSED ]Re: [VOTE][FASTTRACK] Apache Struts Extras - Multipart parser plugins 1.1

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-03-23 8:59 GMT+01:00 Lukasz Lenart :

> The vote passed with result:
>
> +1 (binding) x3
>
>
> Thank you!
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> 2017-03-22 7:34 GMT+01:00 Lukasz Lenart :
> > The Apache Struts Extras Secure Jakarta Multipart parser plugin 1.1
> > and Secure Jakarta Stream Multipart parser plugin 1.1 test builds are
> > now available. They provider multipart parser implementations to fix
> > the latest critical security vulnerability:
> >
> > - Possible Remote Code Execution when performing file upload based on
> > Jakarta plugin
> >
> > For details and the rationale behind these changes, please consult the
> > corresponding security bulletins:
> > * https://cwiki.apache.org/confluence/display/WW/S2-045
> > * https://cwiki.apache.org/confluence/display/WW/S2-046
> >
> > These releases contains a fix for wrong scope used in a bean
> > definition which works with Struts 2.5.x series but fallbacks to
> > "singleton" for Struts 2.3.x
> > - https://github.com/apache/struts-extras/pull/1
> >
> > Release notes:
> > * https://github.com/apache/struts-extras/blob/master/
> struts2-secure-jakarta-multipart-parser-plugin/README.md
> > * https://github.com/apache/struts-extras/blob/master/
> struts2-secure-jakarta-stream-multipart-parser-plugin/README.md
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/struts-extras/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > This is a "fast-track" release vote. If we have a positive vote within
> > 24 hours (at least three binding +1s and more +1s than -1s), the
> > release may be submitted for mirroring and announced to the usual
> > channels.
> >
> > The website download link will include the mirroring timestamp
> > parameter [1], which limits the selection of mirrors to those that
> > have been refreshed since the indicated time and date. (After 24
> > hours, we *must* remove the timestamp parameter from the website link,
> > to avoid unnecessary server load.) In the case of a fast-track
> > release, the email announcement will not link directly to
> > , but to , so that we can control use of
> > the timestamp parameter.
> >
> > [1] http://apache.org/dev/mirrors.html#use
> >
> > - The Apache Struts group.
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Apache Struts Extras - Multipart parser plugins 1.0

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2017-03-20 11:40 GMT+01:00 Lukasz Lenart :

> 2017-03-20 11:36 GMT+01:00 Stefaan Dutry :
> > Could it be that there's 2 typos in the README.md of
> > struts2-secure-jakarta-stream-multipart-parser-plugin:
> >   * supported verions: versions 2.5.20 till 2.5.5
> >   * double '-' in artifactid inside POM snippet
> >
> > https://github.com/apache/struts-extras/blob/master/
> struts2-secure-jakarta-stream-multipart-parser-plugin/README.md
>
> Thanks, fixed!
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Drop struts2-sitegraph-plugin

[Johannes Geppert]

Hi,

according to the central stats at https://repository.apache.org it is used
but really rarely.
I also think this plugin could be removed from the official distribution.

But should we first mark it as deprecated before we remove it?

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-03-08 17:50 GMT+01:00 Lukasz Lenart :

> Hi,
>
> I want to drop this plugin, I think nobody is using it and holds back
> some refactors I want to perform.
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.3.32

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 binding

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-03-06 21:06 GMT+01:00 Lukasz Lenart :

> 2017-03-06 12:58 GMT+01:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.5.10.1

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 binding

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-03-06 21:49 GMT+01:00 Stefaan Dutry :

> 2.5.10.1
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.10

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)

+1 binding

Thanks for all the work!

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2017-01-31 11:14 GMT+01:00 Lukasz Lenart :

> The Apache Struts 2.5.10 test build is now available. With this
> release the following issues were addressed:
>
> Bug
> [WW-4693] - How to handle 404 when using wildcard instead of error 500
> when the wildcard method doesn't exist
> [WW-4725] - MessageStoreInterceptor must handle all redirects
> [WW-4726] - MaxMultiPartUpload limited to 2GB (Long --> Integer)
> [WW-4727] - Struts 2.5.8 no longer supports the  directive in
> the struts.xml
> [WW-4728] - JSONValidationInterceptor change static parameters names
> [WW-4729] - ServletDispatcherResult can't handle parameters anymore
> [WW-4730] - TokenInterceptor synchronized on session.getId().intern()
> [WW-4731] - XSLT error during transformation
> [WW-4733] - No default parameter defined for result [json] of type
> [org.apache.struts2.json.JSONResult]
> [WW-4734] - I18Interceptor ignores session or cookie Locale after
> first lookup failure
> [WW-4735] - EmailValidator does not accept new domain suffixes
>
> Improvement
> [WW-3961] - struts.xml include not loading in dependant jar files
> [WW-4050] - AnnotationValidationInterceptor should consult
> UnknownHandler before throwing NoSuchMethodException
> [WW-4102] - ActionSupport.LOG should be private
> [WW-4159] - Remove StrutsObjectFactory and define
> StrutsInterceptorFactory instead
> [WW-4174] - Make OgnlValueStack and OgnlValueStackFactory More Extensible
> [WW-4687] - Make interceptor parameters dynamic
>
> New Feature
> [WW-3787] - allow include other config files from classpath
>
> Release notes:
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.10
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5.10/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 24 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.8

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-12-13 7:15 GMT+01:00 Lukasz Lenart :

> 2016-12-12 13:35 GMT+01:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Upgrading do Servlet API 2.5 and JSP API 2.1

[Johannes Geppert]

+1 for a 2.6.x based on Servlet 3.0 and JSP 2.2.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-11-16 18:01 GMT+01:00 Aleksandr Mashchenko :

> Maybe Servlet 3.0 and JSP 2.2.
>
> For example: Apache Tomcat implements both in it 7.0.x series, which is
> available since ~2011.
> And support for the Apache Tomcat 6.0.x will end on 31 December 2016.
>
> ---
> Regards,
> Aleksandr
>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Archetypes 2.5.5

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)

binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-10-21 14:45 GMT+02:00 Lukasz Lenart :

> The Apache Struts Archetypes 2.5.5 test build is now available.
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 24 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Using org.apache.struts2.plugin

[Johannes Geppert]

In generally I really like the idea.
But how should maven publish work with this groupId?

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-10-20 6:18 GMT+02:00 Lukasz Lenart :

> Rather an universal groupId, something like net.liftmodules in the
> Lift framework http://www.liftweb.net/lift_modules
>
> 2016-10-19 22:45 GMT+02:00 Martin Gainty :
> >
> >
> >
> >
> >
> >
> >
> >> From: lukaszlen...@apache.org
> >> Date: Wed, 19 Oct 2016 20:09:48 +0200
> >> Subject: Using org.apache.struts2.plugin
> >> To: dev@struts.apache.org
> >>
> >> Hi,
> >>
> >> What do you think about allowing third parties to use
> >> "org.apache.struts2.plugin" namespace in their plugins?
> >>
> > MG>if i'm understanding correctly org.apache.struts2.plugin could somehow
> > morph into a published namespace?
> > MG>then the org.apache.struts2.plugin  declaration could force data-types
> > and ordering to adhere to published schema
> > MG>speaking of which is there a published xsd schema for
> > org.apache.struts.plugin?
> >
> > MG>or would org.apache.struts2.plugin be more of a universal groupId?
> >
> >> Regards
> >> --
> >> Łukasz
> >> + 48 606 323 122 http://www.lenart.org.pl/
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> >> For additional commands, e-mail: dev-h...@struts.apache.org
> >>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.3.31

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-10-13 7:24 GMT-07:00 Christoph Nenning :

> 2016-10-12 7:29 GMT+02:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>

Re: Struts 2.3.31 & 2.5.3

[Johannes Geppert]

Sounds good! :-)

Does this 2.5.3 version is then based on ASM5 libs?

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2016-09-28 11:45 GMT+02:00 Lukasz Lenart :

> Hi,
>
> It's time to prepare new releases, please inform if you have any other
> outstanding issues that should be addressed before pushing out a new
> release :)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.2

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-07-14 7:16 GMT+02:00 Lukasz Lenart :

> 2016-07-12 7:39 GMT+02:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.3.30

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-07-14 9:14 GMT+02:00 :

> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1
>
> -Original Message-
> From: Lukasz Lenart [mailto:lukaszlen...@apache.org]
> Sent: 14 July 2016 07:16
> To: Struts Developers List 
> Subject: Re: [VOTE] Struts 2.3.30
>
> 2016-07-12 7:37 GMT+02:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.lenart.org.pl_=CwIFaQ=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU=fDdXMUKe3aefjQD4QTXZSils9GcaQ5iv5G4OfGU33TU=xW9gnw7JQnWIq4RQw7BPcWyKlmF90W5rl9Wu0LYLHtU=SD0vCTgRt_m4D5v3ag_cpvf6rW-vin4olzSqQKdH34o=
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>
> 
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise private information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the email by you is prohibited.
>
> 
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise private information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the email by you is prohibited.
>

Re: Struts2 Arianna plugin

[Johannes Geppert]

Good question. Was it already available via Maven?
Otherwise we may need to setup a sonatype account for that.

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2016-07-10 9:41 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:

> Hi,
>
> I have upgraded the plugin to latest Struts version and switched to
> Log4j2 - I'm wondering how to release the new version?
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> 2016-07-03 11:43 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:
> > Great, thanks!
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > 2016-06-24 17:11 GMT+02:00 Johannes Geppert <jo...@apache.org>:
> >> I removed the original one and forked the more up to date one in the
> >> community space.
> >>
> >> Best Regards
> >>
> >> Johannes
> >>
> >> #
> >> web: http://www.jgeppert.com
> >> twitter: http://twitter.com/jogep
> >>
> >>
> >> 2016-06-22 10:24 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:
> >>
> >>> Here is author's answer about donating plugin, as you see there is
> >>> another fork which is more recent. So I think it makes more sense to
> >>> fork the mentioned fork.
> >>>
> >>> -- Forwarded message --
> >>> From: Giovanni Tosto <giovanni.to...@gmail.com>
> >>> Date: 2016-06-20 22:24 GMT+02:00
> >>> Subject: Re: Struts2 Arianna plugin
> >>> To: Lukasz Lenart <lukaszlen...@apache.org>
> >>>
> >>>
> >>> Hi Lukasz
> >>> i will be very glad to become a member of your community and to donate
> >>> the plugin.
> >>> However, I wonder what "donate" actually means, why not just fork the
> >>> repository ? I will be very glad to accept any pull request coming
> >>> from the community
> >>>
> >>> Anyway the current plugin is the one on the repository at url
> >>> https://github.com/Gtosto/struts2-arianna-plugin which has been
> >>> refactored and it is more recent.
> >>>
> >>> P.S.
> >>> Sorry for the late response, but i was very busy in these days
> >>>
> >>> On Wed, Jun 15, 2016 at 7:53 AM, Lukasz Lenart <
> lukaszlen...@apache.org>
> >>> wrote:
> >>> >
> >>> > Hi,
> >>> >
> >>> > I found your plugin [1] on the Internet and I'm wondering if you
> would
> >>> > like to donate it to https://github.com/struts-community-plugins
> >>> >
> >>> > [1] https://github.com/nexus061/struts2-arianna-plugin
> >>> >
> >>> >
> >>> > Thanks in advance
> >>> > --
> >>> > Łukasz
> >>> > + 48 606 323 122 http://www.lenart.org.pl/
> >>>
> >>> -
> >>> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> >>> For additional commands, e-mail: dev-h...@struts.apache.org
> >>>
> >>>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Struts2 Arianna plugin

[Johannes Geppert]

I removed the original one and forked the more up to date one in the
community space.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-06-22 10:24 GMT+02:00 Lukasz Lenart :

> Here is author's answer about donating plugin, as you see there is
> another fork which is more recent. So I think it makes more sense to
> fork the mentioned fork.
>
> -- Forwarded message --
> From: Giovanni Tosto 
> Date: 2016-06-20 22:24 GMT+02:00
> Subject: Re: Struts2 Arianna plugin
> To: Lukasz Lenart 
>
>
> Hi Lukasz
> i will be very glad to become a member of your community and to donate
> the plugin.
> However, I wonder what "donate" actually means, why not just fork the
> repository ? I will be very glad to accept any pull request coming
> from the community
>
> Anyway the current plugin is the one on the repository at url
> https://github.com/Gtosto/struts2-arianna-plugin which has been
> refactored and it is more recent.
>
> P.S.
> Sorry for the late response, but i was very busy in these days
>
> On Wed, Jun 15, 2016 at 7:53 AM, Lukasz Lenart 
> wrote:
> >
> > Hi,
> >
> > I found your plugin [1] on the Internet and I'm wondering if you would
> > like to donate it to https://github.com/struts-community-plugins
> >
> > [1] https://github.com/nexus061/struts2-arianna-plugin
> >
> >
> > Thanks in advance
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Struts2 Arianna plugin

[Johannes Geppert]

Ok, I forked it in the struts community plugin team.

https://github.com/struts-community-plugins/struts2-arianna-plugin

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2016-06-16 7:21 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:

> I've asked author about donating the plugin but still didn't get
> answer. And there is no license file yet each file has a header with
> Apache 2.0 license so we should be good with forking it :)
>
>
> Cheers
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> 2016-06-15 17:40 GMT+02:00 Johannes Geppert <jo...@apache.org>:
> > In generally it is a good idea to have it there. Unfortunately I never
> see
> > it before and right now it looks a bit dead.
> > Last commit is 5 years ago. Not sure if anyone is using it. Is it
> available
> > in maven repository?
> >
> > But we just could fork it in the community plugins.
> >
> > Best Regards
> >
> > Johannes
> >
> > #
> > web: http://www.jgeppert.com
> > twitter: http://twitter.com/jogep
> >
> >
> > 2016-06-14 22:49 GMT-07:00 Lukasz Lenart <lukaszlen...@apache.org>:
> >
> >> Hi,
> >>
> >> Do you know this plugin?
> >>
> >> https://github.com/nexus061/struts2-arianna-plugin
> >> http://arianna-plugin-showcase.appspot.com/simple/home.do
> >>
> >> Maybe it would be a good idea to add it to
> >> https://github.com/struts-community-plugins ?
> >>
> >>
> >> Regards
> >> --
> >> Łukasz
> >> + 48 606 323 122 http://www.lenart.org.pl/
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> >> For additional commands, e-mail: dev-h...@struts.apache.org
> >>
> >>
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Struts2 Arianna plugin

[Johannes Geppert]

In generally it is a good idea to have it there. Unfortunately I never see
it before and right now it looks a bit dead.
Last commit is 5 years ago. Not sure if anyone is using it. Is it available
in maven repository?

But we just could fork it in the community plugins.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-06-14 22:49 GMT-07:00 Lukasz Lenart :

> Hi,
>
> Do you know this plugin?
>
> https://github.com/nexus061/struts2-arianna-plugin
> http://arianna-plugin-showcase.appspot.com/simple/home.do
>
> Maybe it would be a good idea to add it to
> https://github.com/struts-community-plugins ?
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5.1

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-06-14 23:37 GMT-07:00 Greg Huber :

> Looks great, thanks.
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [x] General Availability (GA)
>
> +1 (b)
>
>
> On 14 June 2016 at 08:16, Lukasz Lenart  wrote:
>
> > The Apache Struts 2.5 test build is now available. With this release:
> > - All security patches applied to version Struts 2.3.29 were also
> > applied to this version (just in case)
> > - Possible DoS attack when using URLValidator S2-041
> > - [WW-4558] - contentType override ignored for JSONInterceptor
> > - [WW-4618] - MessageStorePreResultListener doesn't store messages for
> > 3rd-party RedirectResult subclasses
> > - [WW-4622] - [struts2-tiles-plugin] [2.3.28]
> > [StrutsWildcardServletTilesApplicationContext] getRealPath
> > - [WW-4626] - EmailValidator flags .cat emails as invalid
> > - [WW-4632] - SMI cannot be disabled
> > - [WW-4634] - Centre alignment doesn't seem to work in Velocity tags
> > - [WW-4637] - Unable to process Jar entry (javassist-3.20.0-GA.jar)
> > - [WW-4643] - Strict Method Invocation breaks Action-Less Results
> > - [WW-4640] - When method is not allowed throw exception with meanigful
> > message
> > - [WW-4644] - update struts2 bom
> >
> > Release notes
> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.1
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/2.5.1/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > The vote will remain open for at least 72 hours, longer upon request.
> > A vote can be amended at any time to upgrade or downgrade the quality
> > of the release based on future experience. If an initial vote
> > designates the build as "Beta", the release will be submitted for
> > mirroring and announced to the user list. Once released as a public
> > beta, subsequent quality votes on a build may be held on the user
> > list.
> >
> > As always, the act of voting carries certain obligations. A binding
> > vote not only states an opinion, but means that the voter is agreeing
> > to help do the work.
> >
> >
> > Kind regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
> >
>

Re: [VOTE][FASTTRACK] Struts 2.3.29

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Johannes Geppert

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-06-14 21:34 GMT-07:00 Lukasz Lenart <lukaszlen...@apache.org>:

> 2016-06-14 9:07 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 binding
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes
Am 05.05.2016 21:23 schrieb "Lukasz Lenart" :

> The Apache Struts 2.5 test build is now available. With this release:
>
> - All security fixes were ported from previous versions
> - XWork source was merged into Struts Core source, it means that there
> be no more xwork artifact nor dedicated jar
> - Spring dependency for tests and spring plugin was upgraded to
> version 4.1.6, see WW-4510.
> - Struts2 internal logging api was marked as deprecated and was
> replaced with new Log4j2 api as logging layer, see WW-4504.
> - Struts2 is now build with JDK7, see WW-4503.
> - New plugin to support bean validation is now part of the
> distribution, see WW-4505.
> - Deprecated plugins are now removed from the distribution and are not
> longer supported anymore.
> - - Dojo Plugin
> - - Codebehind Plugin
> - - JSF Plugin
> - - Struts1 Plugin
> - New security option was added - Strict Method Invocation (also known
> as Strict DMI), see WW-4540
> - Add support for latest stable AngularJS in Maven archetype, see WW-4522
> - Dropped support for id and name - replaced with var, see WW-2069
> - Dedicated archive with a minimal set of dependencies was introduced,
> see WW-4570
> - It is possible to use multiple names when defining a result, see WW-4590
> - Rest plugin honors Accept header, see WW-4588
> - New result 'JSONActionRedirectResult' in json-plugin was defined, see
> WW-4591
> - Tiles plugin was upgrade to the latest Tiles 3 and tiles3-plugin was
> dropped, see WW-4584
> - JasperReports plugins was upgraded to JasperReport 6.0, see WW-4381
> - OGNL was upgraded to version 3.1.4 and it breaks access to
> properties as it follows Java Bean Specification, see WW-4207 and
> WW-3909
>
> and many other fixes and improvements
>
> Release notes
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Release Struts 2.5

[Johannes Geppert]

I would like to see a first stable 2.5 release as soon as possible.
So I could announce and recommend it at the ApacheCon in Vancouver.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-04-12 15:20 GMT+02:00 Greg Huber :

> I did a patch for the DMI stuff, which I have been running for some time
> now.
>
>  https://issues.apache.org/jira/browse/WW-4596
>
> It needs some more knowledge on how to access properties from struts.xml in
> XmlConfigurationProvider as the only way I could work out was a hack.
>
> On 12 April 2016 at 13:45, Lukasz Lenart  wrote:
>
> > Anything left to fix before I can push out 2.5?
> > I wanted to include my PR with HttpParameters but I don't have enough
> > time to finish it :(
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
> >
>

Re: [VOTE][FASTTRACK] Struts 2.3.28.1

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-04-20 14:59 GMT+02:00 Lukasz Lenart :

> 2016-04-20 8:42 GMT+02:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.3.20.3

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-04-20 15:33 GMT+02:00 Rene Gielen :

> +1 GA, binding
>
> Am 20.04.16 um 13:51 schrieb Lukasz Lenart:
> > The Struts 2.3.20.3 test build is now available. It includes the
> > latest security patch which fixes three possible vulnerabilities:
> > - Forced double OGNL evaluation, when evaluated on raw user input in
> > tag attributes, may lead to remote code execution.
> > - Possible RCE vulnerability in XSLTResult
> > - Prevents execution of chained expressions based on new isSequence
> > flag introduce in appropriated OGNL versions
> >
> > For details and the rationale behind these changes, please consult the
> > corresponding security bulletins:
> > * https://cwiki.apache.org/confluence/display/WW/S2-029
> > * https://cwiki.apache.org/confluence/display/WW/S2-031
> > * https://cwiki.apache.org/confluence/display/WW/S2-032
> >
> > Release notes:
> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.20.3
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/2.3.20.3/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > This is a "fast-track" release vote. If we have a positive vote after
> > 24 hours (at least three binding +1s and more +1s than -1s),  the
> > release may be submitted for mirroring and announced to the usual
> > channels.
> >
> > The website download link will include the mirroring timestamp
> > parameter [1], which limits the selection of mirrors to those that
> > have been refreshed since the indicated time and date. (After 24
> > hours, we *must* remove the timestamp parameter from the website link,
> > to avoid unnecessary server load.) In the case of a fast-track
> > release, the email announcement will not link directly to
> > , but to , so that we can control use of
> > the timestamp parameter.
> >
> > [1] http://apache.org/dev/mirrors.html#use
> >
> > - The Apache Struts group.
> >
> >
> > Regards
> >
>
> --
> René Gielen
> http://twitter.com/rgielen
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTTRACK] Struts 2.3.24.3

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-04-20 17:45 GMT+02:00 Johannes Geppert <joh...@gmail.com>:

> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 binding
>
> Best Regards
>
> Johannes
>
> #
> web: http://www.jgeppert.com
> twitter: http://twitter.com/jogep
>
> 2016-04-20 15:53 GMT+02:00 Christoph Nenning <
> christoph.nenn...@lex-com.net>:
>
>> > [ ] Leave at test build
>> > [ ] Alpha
>> > [ ] Beta
>> > [X] General Availability (GA)
>>
>> +1, binding
>>
>>
>> Regards,
>> Christoph
>>
>>
>>
>>
>> > The Struts 2.3.24.3 test build is now available. It includes the
>> > latest security patch which fixes three possible vulnerabilities:
>> > - Forced double OGNL evaluation, when evaluated on raw user input in
>> > tag attributes, may lead to remote code execution.
>> > - Possible RCE vulnerability in XSLTResult
>> > - Prevents execution of chained expressions based on new isSequence
>> > flag introduce in appropriated OGNL versions
>> >
>> > For details and the rationale behind these changes, please consult the
>> > corresponding security bulletins:
>> > * https://cwiki.apache.org/confluence/display/WW/S2-029
>> > * https://cwiki.apache.org/confluence/display/WW/S2-031
>> > * https://cwiki.apache.org/confluence/display/WW/S2-032
>> >
>> > Release notes:
>> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.24.3
>> >
>> > Distribution:
>> > * https://dist.apache.org/repos/dist/dev/struts/2.3.24.3/
>> >
>> > Maven 2 staging repository:
>> > * https://repository.apache.org/content/repositories/staging/
>> >
>> > Once you have had a chance to review the test build, please respond
>> > with a vote on its quality:
>> >
>> > [ ] Leave at test build
>> > [ ] Alpha
>> > [ ] Beta
>> > [ ] General Availability (GA)
>> >
>> > Everyone who has tested the build is invited to vote. Votes by PMC
>> > members are considered binding. A vote passes if there are at least
>> > three binding +1s and more +1s than -1s.
>> >
>> > This is a "fast-track" release vote. If we have a positive vote after
>> > 24 hours (at least three binding +1s and more +1s than -1s),  the
>> > release may be submitted for mirroring and announced to the usual
>> > channels.
>> >
>> > The website download link will include the mirroring timestamp
>> > parameter [1], which limits the selection of mirrors to those that
>> > have been refreshed since the indicated time and date. (After 24
>> > hours, we *must* remove the timestamp parameter from the website link,
>> > to avoid unnecessary server load.) In the case of a fast-track
>> > release, the email announcement will not link directly to
>> > , but to , so that we can control use of
>> > the timestamp parameter.
>> >
>> > [1] http://apache.org/dev/mirrors.html#use
>> >
>> > - The Apache Struts group.
>> >
>> >
>> > Regards
>> > --
>> > Łukasz
>> > + 48 606 323 122 http://www.lenart.org.pl/
>> >
>> > -
>> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
>> > For additional commands, e-mail: dev-h...@struts.apache.org
>> >
>>
>> This Email was scanned by Sophos Anti Virus
>>
>
>

Re: [VOTE][FASTTRACK] Struts 2.3.24.3

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2016-04-20 15:53 GMT+02:00 Christoph Nenning 
:

> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1, binding
>
>
> Regards,
> Christoph
>
>
>
>
> > The Struts 2.3.24.3 test build is now available. It includes the
> > latest security patch which fixes three possible vulnerabilities:
> > - Forced double OGNL evaluation, when evaluated on raw user input in
> > tag attributes, may lead to remote code execution.
> > - Possible RCE vulnerability in XSLTResult
> > - Prevents execution of chained expressions based on new isSequence
> > flag introduce in appropriated OGNL versions
> >
> > For details and the rationale behind these changes, please consult the
> > corresponding security bulletins:
> > * https://cwiki.apache.org/confluence/display/WW/S2-029
> > * https://cwiki.apache.org/confluence/display/WW/S2-031
> > * https://cwiki.apache.org/confluence/display/WW/S2-032
> >
> > Release notes:
> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.24.3
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/2.3.24.3/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > This is a "fast-track" release vote. If we have a positive vote after
> > 24 hours (at least three binding +1s and more +1s than -1s),  the
> > release may be submitted for mirroring and announced to the usual
> > channels.
> >
> > The website download link will include the mirroring timestamp
> > parameter [1], which limits the selection of mirrors to those that
> > have been refreshed since the indicated time and date. (After 24
> > hours, we *must* remove the timestamp parameter from the website link,
> > to avoid unnecessary server load.) In the case of a fast-track
> > release, the email announcement will not link directly to
> > , but to , so that we can control use of
> > the timestamp parameter.
> >
> > [1] http://apache.org/dev/mirrors.html#use
> >
> > - The Apache Struts group.
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
>
> This Email was scanned by Sophos Anti Virus
>

Re: Dropping built-in profiling

[Johannes Geppert]

I was never using this but instead of dropping, we could maybe move this to
an own plugin in version 3.0?

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-03-29 10:19 GMT+02:00 Christoph Nenning 
:

> > Does anybody is using this? I'm not sure how useful it is when there
> > are other very good tools (JProfiler, YourKit, etc). I think it adds a
> > bit of a performance overhead which can be dropped.
> >
> > https://struts.apache.org/docs/profiling.html
> >
> >
>
> did not even know that it existed ;)
>
> +1 for removing
>
>
>
> Regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>

Re: [VOTE] Struts 2.3.28

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

+1 binding

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-03-19 12:07 GMT+01:00 Greg Huber :

> Thanks, redirect messages and interceptor switching correctly now.
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [x] General Availability (GA)
>
> +1 binding
>
> On 18 March 2016 at 20:46, Lukasz Lenart  wrote:
>
> > The Apache Struts 2.3.28 test build is now available. With this release:
> > - Possible XSS vulnerability in pages not using UTF-8 was fixed, read
> > more details in S2-028
> > - Prevents possible RCE when reusing user input in tag's attributes,
> > see more details in S2-029
> > - I18NInterceptor narrows selected locale to those available in JVM to
> > reduce possibility of another XSS vulnerability, see more details in
> > S2-030
> > - New Configurationprovider type was introduced -
> > ServletContextAwareConfigurationProvider, see WW-4410
> > - Setting status code in HttpHeaders isn't ignored anymore, see WW-4545
> > - Spring BeanPostProcessor(s) are called only once to constructed
> > objects., see WW-4554
> > - OGNL was upgraded to version 3.0.13, see WW-4562
> > - Tiles 2 Plugin was upgraded to latest available Tiles 2 version, see
> > WW-4568
> > - A dedicated assembly with minimal set of jars was defined, see WW-4570
> > - Struts2 Rest plugin properly handles JSESSIONID with DMI, see WW-4585
> > - Improved the Struts2 Rest plugin to honor Accept header, see WW-4588
> > - MessageStoreInterceptor was refactored to use PreResultListener to
> > store messages, see WW-4605
> > - A new annotation was added to support configuring Tiles -
> > @TilesDefinition, see WW-4606
> >
> > and few other small improvements, please see the release notes
> >
> > Security note:
> > This release fixes three potential security vulnerabilities as
> > mentioned in the Version Notes
> >
> > Release notes:
> > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.28
> >
> > Distribution:
> > * https://dist.apache.org/repos/dist/dev/struts/2.3.28/
> >
> > Maven 2 staging repository:
> > * https://repository.apache.org/content/repositories/staging/
> >
> > Once you have had a chance to review the test build, please respond
> > with a vote on its quality:
> >
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [ ] General Availability (GA)
> >
> > Everyone who has tested the build is invited to vote. Votes by PMC
> > members are considered binding. A vote passes if there are at least
> > three binding +1s and more +1s than -1s.
> >
> > The vote will remain open for at least 72 hours, longer upon request.
> > A vote can be amended at any time to upgrade or downgrade the quality
> > of the release based on future experience. If an initial vote
> > designates the build as "Beta", the release will be submitted for
> > mirroring and announced to the user list. Once released as a public
> > beta, subsequent quality votes on a build may be held on the user
> > list.
> >
> > As always, the act of voting carries certain obligations. A binding
> > vote not only states an opinion, but means that the voter is agreeing
> > to help do the work.
> >
> >
> > Kind regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> > For additional commands, e-mail: dev-h...@struts.apache.org
> >
> >
>

Re: [VOTE] Struts 2.3.26

[Johannes Geppert]

> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)

+1 (binding)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-03-17 18:28 GMT+01:00 Lukasz Lenart :

> 2016-03-16 18:05 GMT+01:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5 BETA3

[Johannes Geppert]

[ ] Leave at test build
[ ] Alpha
[x] Beta
[ ] General Availability (GA)

Looking forward to see the first GA version. ;-)

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2016-01-21 14:56 GMT+01:00 Lukasz Lenart :

> The Apache Struts 2.5 BETA3 test build is now available.
>
> New in BETA1
> - XWork source was merged into Struts Core source, it means that there
> be no more xwork artifact nor dedicated jar
> - OGNL was upgraded to version 3.0.11 and it breaks access to
> properties as it follows Java Bean Specification, see WW-4207 and
> WW-3909
> - Spring dependency for tests and spring plugin was upgraded to
> version 4.1.6, see WW-4510.
> - Struts2 internal logging api was marked as deprecated and was
> replaced with new Log4j2 api as logging layer, see WW-4504.
> - Struts2 is now build with JDK7, see WW-4503.
> - New plugin to support bean validation is now part of the
> distribution, see WW-4505.
> - Deprecated plugins are now removed from the distribution and are not
> longer supported anymore.
> - - Dojo Plugin
> - - Codebehind Plugin
> - - JSF Plugin
> - - Struts1 Plugin
>
> New in BETA2
> - New security option was added - Strict Method Invocation (also known
> as Strict DMI), see WW-4540
> - Add support for latest stable AngularJS in Maven archetype, see WW-4522
>
> New in BETA3
> - Dropped support for id and name - replaced with var, see WW-2069
> - Dedicated archive with a minimal set of dependencies was introduced,
> see WW-4570
> - It is possible to use multiple names when defining a result, see WW-4590
> - Rest plugin honors Accept header, see WW-4588
> - New result 'JSONActionRedirectResult' in json-plugin was defined, see
> WW-4591
> - Tiles plugin was upgrade to the latest Tiles 3 and tiles3-plugin was
> dropped, see WW-4584
> - JasperReports plugins was upgraded to JasperReport 6.0, see WW-4381
> - OGNL was upgraded to version 3.0.11 and it breaks access to
> properties as it follows Java Bean Specification, see WW-4207 and
> WW-3909
> - - and then OGNL was upgraded to version 3.1.1, see WW-4561
> - - and then OGNL was upgraded to version 3.2.1, see WW-4577
>
> Release notes
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5-BETA3/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Jenkins build is back to stable : Struts-JDK8-master #49

[Johannes Geppert]

Great catch! Now it is also building again on my linux dev box.

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-10-13 14:04 GMT+02:00 Christoph Nenning 
:

> > From: Apache Jenkins Server 
> > To: dev@struts.apache.org,
> > Date: 13.10.2015 14:03
> > Subject: Jenkins build is back to stable : Struts-JDK8-master #49
> >
> > See 
> >
> >
>
> Y - A - Y ! ! !
>
>
>
> This Email was scanned by Sophos Anti Virus
>

Re: Struts 2.3.x - a new release

[Johannes Geppert]

Hi,

I think SMI has a high impact and should be better a feature for 2.5 only.
Cause this can break some existing apps and is may not a "drop in" upgrade
only.

Johannes
Am 09.10.2015 5:56 nachm. schrieb "Lukasz Lenart" :

> Hi,
>
> I am going to spend some time on preparing a new 2.3.x release, there
> is already few issues registered. All the work will be performed in
> the "struts-2-3" branch. I am also wondering if I should merge the
> changes with Strict Method Invocation into to that branch?
>
>
> https://issues.apache.org/jira/issues/?jql=project%20%3D%20WW%20AND%20resolution%20%3D%20Unresolved%20AND%20fixVersion%20%3D%202.3.x%20ORDER%20BY%20due%20ASC%2C%20priority%20DESC%2C%20created%20ASC
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Official Docker images

[Johannes Geppert]

+1 for creating docker images

My user; johgep



#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-10-08 8:27 GMT+02:00 Lukasz Lenart :

> I have created an organisation -
> https://hub.docker.com/u/theapachestruts/ and I'm going to push the
> first image which can be used to build the site locally.
> If you want to join just send to me your DockerHub's username
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> 2015-10-07 16:51 GMT+02:00 Dave Newton :
> > Might be nice if it included running sample apps since that seems to trip
> > people up sometimes.
> >
> > On Wed, Oct 7, 2015 at 6:11 AM, Lukasz Lenart 
> > wrote:
> >
> >> Hi,
> >>
> >> What do you think about creating an official images on DockerHub? At
> >> least I would like to use one to support publishing the site but we
> >> can add others as well.
> >>
> >>
> >> Regards
> >> --
> >> Łukasz
> >> + 48 606 323 122 http://www.lenart.org.pl/
> >>
> >> -
> >> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> >> For additional commands, e-mail: dev-h...@struts.apache.org
> >>
> >>
> >
> >
> > --
> > e: davelnew...@gmail.com
> > m: 908-380-8699
> > s: davelnewton_skype
> > t: @dave_newton 
> > b: Bucky Bits 
> > g: davelnewton 
> > so: Dave Newton 
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Build failed in Jenkins: Struts-JDK8-master #31

[Johannes Geppert]

This summer I refactored all java docs to be compliant with JDK8.
And for me it works. On build all this java doc errors does not pops up
anymore.

I would try to avoid ignoring this kind of errors, better provide valid
java docs.
But I don't find any reference in the java docs to the
org.springframework.core.io.DefaultResourceLoader file.

May something is depending from the JDK version?

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-10-08 13:45 GMT+02:00 Christoph Nenning 
:

> > From: Lukasz Lenart 
> > To: Struts Developers List ,
> > Date: 06.10.2015 20:25
> > Subject: Re: Build failed in Jenkins: Struts-JDK8-master #31
> >
> > Any idea why it fails?
> >
> > [ERROR] Failed to execute goal
> > org.apache.maven.plugins:maven-javadoc-plugin:2.8:jar (default-cli) on
> > project struts2-portlet-plugin: MavenReportException: Error while
> > creating archive:
> > [ERROR] Exit code: 1 - javadoc: error -
> > com.sun.tools.doclets.internal.toolkit.util.DocletAbortException:
> > com.sun.tools.javac.code.Symbol$CompletionFailure: class file for
> > org.springframework.core.io.DefaultResourceLoader not found
> >
> >
>
> At least I could reproduce the error:
>
> cd plugins/portlet
> mvn clean javadoc:javadoc
>
>
> Happens with jdk8 only.
> When I do 'mvn package' no javadoc is generated and thus I did not get
> this error before.
>
>
> That may happen due to the new doclint option of javadoc:
>
>
> http://docs.oracle.com/javase/8/docs/technotes/guides/javadoc/whatsnew-8.html
>
> In maven it should be possible to disable it with:
> -Xdoclint:none
>
>
> http://maven.apache.org/plugins/maven-javadoc-plugin/javadoc-mojo.html#additionalparam
>
> But I'm not able to get this working.
>
> The javadoc commandline logged by maven still did not include
> -Xdoclint:none.
>
>
> Regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>

Re: Build failed in Jenkins: Struts-JDK8-master #31

[Johannes Geppert]

Can you build it locally? I got following test error:

---
Test set: org.apache.struts2.portlet.PortletApplicationMapTest
---
Tests run: 6, Failures: 1, Errors: 0, Skipped: 0, Time elapsed: 0.049 sec
<<< FAILURE!
testEntrySet(org.apache.struts2.portlet.PortletApplicationMapTest)  Time
elapsed: 0.004 sec  <<< FAILURE!
junit.framework.AssertionFailedError: expected: but was:
at junit.framework.Assert.fail(Assert.java:57)
at junit.framework.Assert.failNotEquals(Assert.java:329)
at junit.framework.Assert.assertEquals(Assert.java:78)
at junit.framework.Assert.assertEquals(Assert.java:86)
at junit.framework.TestCase.assertEquals(TestCase.java:253)
at
org.apache.struts2.portlet.PortletApplicationMapTest.testEntrySet(PortletApplicationMapTest.java:143)


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-10-06 20:26 GMT+02:00 Lukasz Lenart :

> Any idea why it fails?
>
> [ERROR] Failed to execute goal
> org.apache.maven.plugins:maven-javadoc-plugin:2.8:jar (default-cli) on
> project struts2-portlet-plugin: MavenReportException: Error while
> creating archive:
> [ERROR] Exit code: 1 - javadoc: error -
> com.sun.tools.doclets.internal.toolkit.util.DocletAbortException:
> com.sun.tools.javac.code.Symbol$CompletionFailure: class file for
> org.springframework.core.io.DefaultResourceLoader not found
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Annotations 1.0.6

[Johannes Geppert]

Can I use this version also with Struts 2.3.24.x ?
At example in the Struts2 jQuery Plugin or Bootstrap Plugin which is build
against 2.3.24.1?

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-09-29 9:28 GMT+02:00 Lukasz Lenart :

> 2015-09-29 9:25 GMT+02:00 Lukasz Lenart :
> > [ ] Leave at test build
> > [ ] Alpha
> > [ ] Beta
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts 2.5 BETA2

[Johannes Geppert]

+1 (binding)

[ ] Leave at test build
[ ] Alpha
[x] Beta
[ ] General Availability (GA)

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-09-28 22:53 GMT+02:00 Lukasz Lenart :

> The Apache Struts 2.5 BETA2 test build is now available.
>
> New in BETA1
> - XWork source was merged into Struts Core source, it means that there
> be no more xwork artifact nor dedicated jar
> - OGNL was upgraded to version 3.0.11 and it breaks access to
> properties as it follows Java Bean Specification, see WW-4207 and
> WW-3909
> - Spring dependency for tests and spring plugin was upgraded to
> version 4.1.6, see WW-4510.
> - Struts2 internal logging api was marked as deprecated and was
> replaced with new Log4j2 api as logging layer, see WW-4504.
> - Struts2 is now build with JDK7, see WW-4503.
> - New plugin to support bean validation is now part of the
> distribution, see WW-4505.
> - Deprecated plugins are now removed from the distribution and are not
> longer supported anymore.
> - - Dojo Plugin
> - - Codebehind Plugin
> - - JSF Plugin
> - - Struts1 Plugin
>
> New in BETA2
> - New security option was added - Strict Method Invocation (also known
> as Strict DMI), see WW-4540
> - Add support for latest stable AngularJS in Maven archetype, see WW-4522
>
> Release notes
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5
>
> Distribution:
> * https://dist.apache.org/repos/dist/dev/struts/2.5-BETA2/
>
> Maven 2 staging repository:
> * https://repository.apache.org/content/repositories/staging/
>
> Once you have had a chance to review the test build, please respond
> with a vote on its quality:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [ ] General Availability (GA)
>
> Everyone who has tested the build is invited to vote. Votes by PMC
> members are considered binding. A vote passes if there are at least
> three binding +1s and more +1s than -1s.
>
> The vote will remain open for at least 72 hours, longer upon request.
> A vote can be amended at any time to upgrade or downgrade the quality
> of the release based on future experience. If an initial vote
> designates the build as "Beta", the release will be submitted for
> mirroring and announced to the user list. Once released as a public
> beta, subsequent quality votes on a build may be held on the user
> list.
>
> As always, the act of voting carries certain obligations. A binding
> vote not only states an opinion, but means that the voter is agreeing
> to help do the work.
>
>
> Kind regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE] Struts Annotations 1.0.6

[Johannes Geppert]

Great! Thanks for the info.

+1 (binding)

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-09-29 9:48 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>:

> 2015-09-29 9:46 GMT+02:00 Johannes Geppert <jo...@apache.org>:
> > Can I use this version also with Struts 2.3.24.x ?
> > At example in the Struts2 jQuery Plugin or Bootstrap Plugin which is
> build
> > against 2.3.24.1?
>
> It requires Java 1.7 and except that it should work.
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [GitHub] struts pull request: WW-4540: Strict DMI

[Johannes Geppert]

+1

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-09-28 9:50 GMT+02:00 Lukasz Lenart :

> If there be no objections I would like to merge this PR and push a new
> BETA today
>
> 2015-09-26 9:57 GMT+02:00 Lukasz Lenart :
> > 2015-09-25 16:04 GMT+02:00 Christoph Nenning <
> christoph.nenn...@lex-com.net>:
> >> Well, I don't think it is necessary to check parent packages at all.
> >> Because strictDMI is a primitive boolean and cannot be null. So each
> >> package has it explicitly configured, inheriting it is not required.
> >> PackageConfig.isStrictMethodInvocation() should just return that value.
> >
> > Not exactly, as Boolean.parseBoolean will return "false" if there was
> > null and null means there is no "strict-method-invocation" attribute
> > configured. That's why I have changed the logic to treat missing
> > "strict-method-invocation" attribute as "true" and evaluate parent
> > packages.
> >
> >> What does the current implementation do?
> >> if strictDMI is set to false it returns false.
> >> if it is set to true parent packages are checked. if it is true in one
> >> parent true is returned.
> >> otherwise true is returned in anycase.
> >>
> >> IMHO it can be just a simple getter.
> >
> > You are right :) But I have some doubts, what if someone has a large
> > application with multiple packages? Right now it will have to disable
> > Stritc DMI in each one, Strict DMI isn't inhertited so it can be done
> > in parent package (his own, not from Struts). But from other side we
> > want to have SMI* is enabled by default.
> >
> > * SMI -> Stritc Method Invocation - it comes to me that DMI is
> > something different than SMI so we should use different abbrevation.
> > SMI works independly from DMI, SMI performs checks inside application
> > (tax police), and DMI does the same but on user input (border police).
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: [VOTE][FASTRACK] Struts 2.3.24.1

[Johannes Geppert]

+1 (binding)

[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-09-23 14:48 GMT+02:00 Lukasz Lenart :

> 2015-09-22 20:38 GMT+02:00 Lukasz Lenart :
> > [X] General Availability (GA)
>
> +1 (binding)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> -
> To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
> For additional commands, e-mail: dev-h...@struts.apache.org
>
>

Re: Build failed in Jenkins: Struts-JDK8-master #31

[Johannes Geppert]

+1 would be great! :-)

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-09-22 16:18 GMT+02:00 Aaron Johnson :

> WW-4402 (https://issues.apache.org/jira/browse/WW-4402) has
> patch WW-4402.diff (
> https://issues.apache.org/jira/secure/attachment/12734928/WW-4402.diff)
> that makes the annotation processor compliant with JDK8. This is a separate
> project from the main Struts project. You will have to release a new
> version of this project in order to use it in the main Struts project.
>
> The same issue has a second patch, WW-4402-struts-core.diff (
>
> https://issues.apache.org/jira/secure/attachment/12735073/WW-4402-struts-core.diff
> )
> that uses the new processing version in the main Struts project. I think it
> uses the SNAPSHOT version since the release is not available.
>
> On Tue, Sep 22, 2015 at 8:28 AM, Christoph Nenning <
> christoph.nenn...@lex-com.net> wrote:
>
> > > I treat this build as a remainder that we must add support for JDK8
> soon
> > :)
> >
> > alright ;)
> >
> > +1
> >
> >
> >
> >
> > >
> > >
> > > 2015-09-22 15:15 GMT+02:00 Christoph Nenning
> > :
> > > > AFAIK jdk8 does not include the apt tool anymore so maven-apt-plugin
> > > > cannot work.
> > > >
> > > >
> > > > See this error from output:
> > > >
> > > >> [ERROR] Failed to execute goal org.apache.myfaces.tobago:maven-apt-
> > > >> plugin:1.0.15:execute (default) on project struts2-core: Error
> > > >> starting apt compiler: com.sun.tools.apt.Main
> > > >
> > > >
> > > > So the build should be adjusted to work with jdk8.
> > > >
> > > >
> > > >
> > > > Regards,
> > > > Christoph
> > > >
> > > >
> > > >
> > > >
> > > > Apache Jenkins Server  schrieb am
> > 22.09.2015
> > > > 15:05:41:
> > > >
> > > >> From: Apache Jenkins Server 
> > > >> To: dev@struts.apache.org,
> > > >> Date: 22.09.2015 15:05
> > > >> Subject: Build failed in Jenkins: Struts-JDK8-master #31
> > > >>
> > > >> See 
> > > >>
> > > >> Changes:
> > > >>
> > > >> [zhouyanming] Uniform comparison
> > > >>
> > > >> --
> > > >> [...truncated 2058 lines...]
> > > >> Generating  > > >>
> core/target/apidocs/com/opensymphony/xwork2/ognl/package-use.html...>
> > > >> Generating  > > >>
> > > > core/target/apidocs/com/opensymphony/xwork2/ognl/accessor/package-
> > > use.html...>
> > > >> Generating  > > >>
> > core/target/apidocs/com/opensymphony/xwork2/result/package-use.html...>
> > > >> Generating  > > >>
> > > >
> > core/target/apidocs/com/opensymphony/xwork2/security/package-use.html...>
> > > >> Generating  > > >>
> > core/target/apidocs/com/opensymphony/xwork2/spring/package-use.html...>
> > > >> Generating  > > >> core/target/apidocs/com/opensymphony/xwork2/spring/interceptor/
> > > >> package-use.html...>
> > > >> Generating  > > >>
> core/target/apidocs/com/opensymphony/xwork2/test/package-use.html...>
> > > >> Generating  > > >>
> core/target/apidocs/com/opensymphony/xwork2/util/package-use.html...>
> > > >> Generating  > > >> core/target/apidocs/com/opensymphony/xwork2/util/classloader/
> > > >> package-use.html...>
> > > >> Generating  > > >>
> > > >
> >
> >
> core/target/apidocs/com/opensymphony/xwork2/util/finder/package-use.html...>
> > > >> Generating  > > >>
> > core/target/apidocs/com/opensymphony/xwork2/util/fs/package-use.html...>
> > > >> Generating  > > >>
> > > > core/target/apidocs/com/opensymphony/xwork2/util/location/package-
> > > use.html...>
> > > >> Generating  > > >>
> > > > core/target/apidocs/com/opensymphony/xwork2/util/logging/package-
> > > use.html...>
> > > >> Generating  > > >> core/target/apidocs/com/opensymphony/xwork2/util/logging/commons/
> > > >> package-use.html...>
> > > >> Generating  > > >> core/target/apidocs/com/opensymphony/xwork2/util/logging/jdk/
> > > >> package-use.html...>
> > > >> Generating  > > >> core/target/apidocs/com/opensymphony/xwork2/util/logging/log4j2/
> > 

Re: [VOTE] Struts 2.5 BETA1

[Johannes Geppert]

 [ ] Leave at test build
 [ ] Alpha
 [X] Beta
 [ ] General Availability (GA)

+1 binding

Best Regards

Johannes

Re: Struts 2.5-BETA1

[Johannes Geppert]

+1 for starting the vote.

Johannes
Am 27.07.2015 08:06 schrieb Lukasz Lenart lukaszlen...@apache.org:

 2015-07-24 21:49 GMT+02:00 Johannes Geppert jo...@apache.org:
  Is there a reason why we don't publish the javadocs?
  I just refactored the javadocs a bit and some of them contains may
 usefully
  information's for developers.
  May it would be great to give the search engines a chance to crawl that
  content.

 As a rule we cannot publish anything without voting so I will call for
 a vote to release this BETA, wdyt?


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Struts 2.5-BETA1

[Johannes Geppert]

Is there a reason why we don't publish the javadocs?
I just refactored the javadocs a bit and some of them contains may usefully
information's for developers.
May it would be great to give the search engines a chance to crawl that
content.

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-07-20 10:26 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 I didn't publish any docs on-line, you can fetch them as a part of the
 release

 2015-07-19 3:03 GMT+02:00 Paul Benedict pbened...@apache.org:
  Do we have any published 2.5 javadocs?
 
 
  Cheers,
  Paul
 
  On Fri, Jul 17, 2015 at 4:13 AM, Lukasz Lenart lukaszlen...@apache.org
  wrote:
 
  Hi,
 
  Please take a time and test the bits - any help is appreciated. Please
  report any problems back. I'll call for vote in a week if no problems
  will be spotted.
 
  Staging Maven repo
  https://repository.apache.org/content/groups/staging/
 
  Standalone artifacts
  https://dist.apache.org/repos/dist/dev/struts/2.5-BETA1/
 
  Release notes
  https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5
 
 
  Thanks in advance
  --
  Łukasz
  + 48 606 323 122 http://www.lenart.org.pl/
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
  For additional commands, e-mail: dev-h...@struts.apache.org
 
 

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Struts 2.5-BETA1

[Johannes Geppert]

Hi Paul,

here you can find the latest java doc versions.
But I think until the first release there are no published java docs
available.

https://repository.apache.org/content/repositories/snapshots/org/apache/struts/struts2-core/2.5-SNAPSHOT/

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-07-19 3:03 GMT+02:00 Paul Benedict pbened...@apache.org:

 Do we have any published 2.5 javadocs?


 Cheers,
 Paul

 On Fri, Jul 17, 2015 at 4:13 AM, Lukasz Lenart lukaszlen...@apache.org
 wrote:

  Hi,
 
  Please take a time and test the bits - any help is appreciated. Please
  report any problems back. I'll call for vote in a week if no problems
  will be spotted.
 
  Staging Maven repo
  https://repository.apache.org/content/groups/staging/
 
  Standalone artifacts
  https://dist.apache.org/repos/dist/dev/struts/2.5-BETA1/
 
  Release notes
  https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5
 
 
  Thanks in advance
  --
  Łukasz
  + 48 606 323 122 http://www.lenart.org.pl/
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
  For additional commands, e-mail: dev-h...@struts.apache.org
 
 

Re: Realease a first beta of version 2.5

[Johannes Geppert]

+1 :-)

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-07-13 13:49 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 Ok, I will prepare Struts-2.5-BETA1

 2015-07-03 8:46 GMT+02:00 Johannes Geppert jo...@apache.org:
  This sounds valid I forgot this point. ;-)
  But on the other side we could also release multiple beta releases.
 
  Johannes
 
  #
  web: http://www.jgeppert.com
  twitter: http://twitter.com/jogep
 
 
  2015-07-03 8:37 GMT+02:00 Christoph Nenning 
 christoph.nenn...@lex-com.net:
 
  According to master plan [1] there is one point missing:
  Switch to strict DMI by default
 
  I would wait until that is finished before doing the beta release.
 
 
 
  Regards,
  Christoph
 
 
 
  [1]
 
 
 https://cwiki.apache.org/confluence/display/WW/Struts+Next#StrutsNext-M1%28akaStruts2.5%29
 
 
 
 
 
 
 
   From: Johannes Geppert jo...@apache.org
   To: Struts Developers List dev@struts.apache.org,
   Date: 03.07.2015 08:18
   Subject: Realease a first beta of version 2.5
  
   Hi all,
  
   just want to ask what you all think about releasing a first 2.5 beta
   version?
  
   There are already a lot of changes and refactoring.
   May it is time to give the user a chance to test the new release and
 to
  get
   some feedback for it.
  
  
   Johannes
  
  
   #
   web: http://www.jgeppert.com
   twitter: http://twitter.com/jogep
 
  This Email was scanned by Sophos Anti Virus
 

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Realease a first beta of version 2.5

[Johannes Geppert]

Hi all,

just want to ask what you all think about releasing a first 2.5 beta
version?

There are already a lot of changes and refactoring.
May it is time to give the user a chance to test the new release and to get
some feedback for it.


Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

Re: Realease a first beta of version 2.5

[Johannes Geppert]

This sounds valid I forgot this point. ;-)
But on the other side we could also release multiple beta releases.

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-07-03 8:37 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net:

 According to master plan [1] there is one point missing:
 Switch to strict DMI by default

 I would wait until that is finished before doing the beta release.



 Regards,
 Christoph



 [1]

 https://cwiki.apache.org/confluence/display/WW/Struts+Next#StrutsNext-M1%28akaStruts2.5%29







  From: Johannes Geppert jo...@apache.org
  To: Struts Developers List dev@struts.apache.org,
  Date: 03.07.2015 08:18
  Subject: Realease a first beta of version 2.5
 
  Hi all,
 
  just want to ask what you all think about releasing a first 2.5 beta
  version?
 
  There are already a lot of changes and refactoring.
  May it is time to give the user a chance to test the new release and to
 get
  some feedback for it.
 
 
  Johannes
 
 
  #
  web: http://www.jgeppert.com
  twitter: http://twitter.com/jogep

 This Email was scanned by Sophos Anti Virus

DWR plugin

[Johannes Geppert]

Hi all,

just want to ask if somebody is using the DWR plugin.
I checked this plugin and realize that it is based on an old version of DWR.

I never used it and I never read some things about it.
Is this a candidate for deprecation or on the other site should we upgrade
it to a newer version of DWR if there is a wide user base.

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

Re: DWR plugin

[Johannes Geppert]

Good to know. :-)

The plugin documentation is really basic. Maybe some example there and/or a
example application would be nice.
https://struts.apache.org/docs/dwr-plugin.html



#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-19 9:25 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-06-19 9:00 GMT+02:00 Johannes Geppert jo...@apache.org:
  Hi all,
 
  just want to ask if somebody is using the DWR plugin.
  I checked this plugin and realize that it is based on an old version of
 DWR.
 
  I never used it and I never read some things about it.
  Is this a candidate for deprecation or on the other site should we
 upgrade
  it to a newer version of DWR if there is a wide user base.

 I think our Client-Side-Validation (s:form validate=true/) bases
 on that (I can be wrong) and long time ago I registered a ticket to
 upgrade DWR
 https://issues.apache.org/jira/browse/WW-4069

 And DWR 2.0 gives a lot of goodness to be used :)


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Log4j2 doesn't work with Google AppEngine

[Johannes Geppert]

Great news! :-)

Do you know what exactly the problem and solution was?

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-15 9:03 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 Not an issue anymore, I was able to resolve all the problems with
 Gary's help and now Log4j2 works without any problems on Google
 AppEngine - they must just release 2.4 version as all changes are in
 the master branch ;-)


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 2015-06-15 8:56 GMT+02:00 Johannes Geppert jo...@apache.org:
  If we don't get it running with log4j2 on appengine then another option
 is
  maybe to not use log4j2 core in the appengine application.
  The users could use slf4j together with a log4j2 - slf4j bridge.
 
  http://logging.apache.org/log4j/log4j-2.1/log4j-to-slf4j/index.html
 
 
  Johannes
 
 
 
  #
  web: http://www.jgeppert.com
  twitter: http://twitter.com/jogep
 
 
  2015-05-29 12:34 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:
 
  Nope, it didn't help
 
  2015-05-29 12:25 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:
   2015-05-29 11:34 GMT+02:00 Johannes Geppert joh...@gmail.com:
   According to Stackoverflow [1] you need to disable property
   name=log4j2.disable.jmx value=true / in appengine-web.xml.
   Also it should be already solved in log4j2 beta.
  
   [1]
  
 
 http://stackoverflow.com/questions/16979283/problems-with-using-log4j-2-in-gae
  
   I will try but it's a different exception. StatusLogger is trying to
   access SystemClassLoader which is prohibited.
  
  
   Regards
   --
   Łukasz
   + 48 606 323 122 http://www.lenart.org.pl/
 
  -
  To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
  For additional commands, e-mail: dev-h...@struts.apache.org
 
 

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Bean Validation Plugin in 2.5

[Johannes Geppert]

Hi Christoph,

I reverted some of your changes because it has broken the build.

[ERROR] 
/home/jenkins/jenkins-slave/workspace/Struts-JDK7-master/plugins/bean-validation/src/main/java/org/apache/struts/beanvalidation/validation/interceptor/DefaultBeanValidationManager.java:[88,43]
error: invalid inferred types for T; inferred type does not conform to
declared bound(s)


See: https://builds.apache.org/job/Struts-JDK7-master/312/console

May we found another solution for that.

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-12 15:08 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net
:

  From: Lukasz Lenart lukaszlen...@apache.org
  To: Struts Developers List dev@struts.apache.org,
  Date: 12.06.2015 14:58
  Subject: Re: Bean Validation Plugin in 2.5
 
  2015-06-12 14:45 GMT+02:00 Christoph Nenning
 christoph.nenn...@lex-com.net:
   Do you already have a confluence account?
  
   Just created: cnenning
 
  Extended your access rights to be full-blown committer :)
 
 

 Alright, thanks.

 But - oh no - now I must write docs, what bad luck I have ;)


 ... I'll have a look at it next week



 This Email was scanned by Sophos Anti Virus

Re: Bean Validation Plugin in 2.5

[Johannes Geppert]

Hi Christoph,

thanks for the code review and fixes.

I already added a basic plugin documentation:
https://cwiki.apache.org/confluence/display/WW/Bean+Validation+Plugin

May we should link from the validation site to the plugin documentation.
Do you already have a confluence account?

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-12 10:57 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net
:

  From: Johannes Geppert jo...@apache.org
  To: Struts Developers List dev@struts.apache.org,
  Date: 27.05.2015 21:18
  Subject: Re: Bean Validation Plugin in 2.5
 
  Just pushed first version of new bean validation plugin.
  In general it is based on Umesh works, but I renamed some thinks and
 made
  some small improvements.
  Also I added some first basic test cases. Would be nice if someone likes
 to
  try the new bean validation plugin.
 
  Next step is preparing a example in the showcase app.
 
  Johannes
 
  #
  web: http://www.jgeppert.com
  twitter: http://twitter.com/jogep
 

 Hi,


 finally I had some time to review the plugin. Looks good to me! Good work
 Umesh and Johannes. I pushed some minor fixes, like typos in javadoc and
 logging, added testcase, fixed generics related warnings (that is hard
 with the JSR API ;) ). A maybe more intresting change I made is to use
 ObjectFactory instead of Class.forName().


 We should add this to docs, maybe put it on this page (or a sub page):
 http://struts.apache.org/docs/validation.html

 How can I edit it?
 Do I need to checkout a SVN repo?


 Regards,
 Christoph

 This Email was scanned by Sophos Anti Virus

Re: Struts2 Mailreader App

[Johannes Geppert]

Not sure if we need to move all apps to the examples.
May if make this examples more prominent.

I mean the showcase is not bad as a working documentation
which is also in our scope when releasing a new version.

Is it possible to trigger also a build of the struts examples when
committing
code to struts itself?

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-10 12:27 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-06-10 9:51 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net
 :
  what about this usecase:
  - do changes in struts
  - update examples to use that new stuff
  - how to use unreleased version of struts in examples project?
  - push it all, so if some user pulls examples it should work for him too

 example-apps can always point to -SNAPSHOT version of Struts - we
 don't have to release them, ppl can clone the source code and use it
 out-of-the-box. If so we can move all the apps to struts-examples and
 have them all in one place


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Struts2 Mailreader App

[Johannes Geppert]

 Hm... so let's drop blank, jboss-blank and mailreader (move to
struts-examples)
Sounds good to me! To start with Struts the archetypes are even better.

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-06-10 15:48 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-06-10 15:42 GMT+02:00 Johannes Geppert jo...@apache.org:
  Not sure if we need to move all apps to the examples.
  May if make this examples more prominent.
 
  I mean the showcase is not bad as a working documentation
  which is also in our scope when releasing a new version.

 Hm... so let's drop blank, jboss-blank and mailreader (move to
 struts-examples)

  Is it possible to trigger also a build of the struts examples when
  committing
  code to struts itself?

 Yes


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: showcase app: jquery missing

[Johannes Geppert]

Hi Christoph,

I would say in this case it is fine to just put it in.
The jquery file it self has it own license header.

Best Regards

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-09 14:57 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net
:

 Hi,

 I wanted to play with the showcase app a bit and realized that jquery is
 missing. So the menu is not working at all. The referenced file name is
 jquery-2.1.4.min.js. Can I just add it? Or must there be an ASF header
 or somthing like that?


 Regards,
 Christoph

 This Email was scanned by Sophos Anti Virus

Struts2 Mailreader App

[Johannes Geppert]

Hi,

what you all think about moving the Struts2 mailreader app to Struts2
examples with release 2.5?
I think this app is not a the best reference and not well maintained at all.


Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

Re: showcase app: jquery missing

[Johannes Geppert]

Thanks! Looks like I forgot the git add. ;-)

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-06-09 16:25 GMT+02:00 Christoph Nenning christoph.nenn...@lex-com.net
:

 
  Hi Christoph,
 
  I would say in this case it is fine to just put it in.
  The jquery file it self has it own license header.
 
  Best Regards
 
  Johannes
 

 OK, have put it in


 This Email was scanned by Sophos Anti Virus

Re: Log42j

[Johannes Geppert]

I would not say that this change is to big for this release.
I mean we drop 4 plugins and change to JDK7.
So adding a new dependency is not such a big change.
And with log4j2 the users can simply add a bridge.
So the migration path is not so hard and requires no code changes.


Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-05-29 7:55 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 Hi,

 Johannes started transforming Struts to use Log4j2 as a base logging
 layer but I thought it'd just affect LoggingFactory in the way that
 the Log4j2 would be the first option to consider when looking for
 available logging layers on classpath.

 With the current approach user can be surprised that they have to
 reconfigure the whole logging layer because they are upgrading from
 2.3 to 2.5 - it's too big change for minor update IMHO.

 My assumption was that we do this in Struts 3 - drop other layers and
 use Log4j2 as a main layer.

 What do you think about that?


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Log4j2 doesn't work with Google AppEngine

[Johannes Geppert]

According to Stackoverflow [1] you need to disable property
name=log4j2.disable.jmx value=true / in appengine-web.xml.
Also it should be already solved in log4j2 beta.

[1]
http://stackoverflow.com/questions/16979283/problems-with-using-log4j-2-in-gae

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-05-29 6:59 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 After switching to Log4j2 we broke all deployments to Google AppEngine
 :) Maybe you have idea what to do? I'm going to ask on Log4j2 list

 Uncaught exception from servlet
 java.lang.ExceptionInInitializerError
 at
 org.apache.logging.log4j.status.StatusLogger.clinit(StatusLogger.java:55)
 at org.apache.logging.log4j.LogManager.clinit(LogManager.java:56)
 at
 org.apache.struts2.tiles.StrutsTilesListener.clinit(StrutsTilesListener.java:50)
 at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
 at
 sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
 at
 sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
 at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
 at java.lang.Class.newInstance(Class.java:375)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.newListenerInstance(WebXmlConfiguration.java:650)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.initListener(WebXmlConfiguration.java:631)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.initWebXmlElement(WebXmlConfiguration.java:368)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.initialize(WebXmlConfiguration.java:289)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.configure(WebXmlConfiguration.java:222)
 at
 org.mortbay.jetty.webapp.WebXmlConfiguration.configureWebApp(WebXmlConfiguration.java:180)
 at
 org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1247)
 at
 org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:517)
 at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:467)
 at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
 at
 com.google.apphosting.runtime.jetty.AppVersionHandlerMap.createHandler(AppVersionHandlerMap.java:199)
 at
 com.google.apphosting.runtime.jetty.AppVersionHandlerMap.getHandler(AppVersionHandlerMap.java:174)
 at
 com.google.apphosting.runtime.jetty.JettyServletEngineAdapter.serviceRequest(JettyServletEngineAdapter.java:134)
 at
 com.google.apphosting.runtime.JavaRuntime$RequestRunnable.run(JavaRuntime.java:527)
 at
 com.google.tracing.TraceContext$TraceContextRunnable.runInContext(TraceContext.java:437)
 at
 com.google.tracing.TraceContext$TraceContextRunnable$1.run(TraceContext.java:444)
 at com.google.tracing.CurrentContext.runInContext(CurrentContext.java:230)
 at
 com.google.tracing.TraceContext$AbstractTraceContextCallback.runInInheritedContextNoUnref(TraceContext.java:308)
 at
 com.google.tracing.TraceContext$AbstractTraceContextCallback.runInInheritedContext(TraceContext.java:300)
 at
 com.google.tracing.TraceContext$TraceContextRunnable.run(TraceContext.java:441)
 at
 com.google.apphosting.runtime.ThreadGroupPool$PoolEntry.run(ThreadGroupPool.java:251)
 at java.lang.Thread.run(Thread.java:745)
 Caused by: java.security.AccessControlException: access denied
 (java.lang.RuntimePermission getClassLoader)
 at
 java.security.AccessControlContext.checkPermission(AccessControlContext.java:382)
 at
 java.security.AccessController.checkPermission(AccessController.java:572)
 at java.lang.SecurityManager.checkPermission(SecurityManager.java:549)
 at
 com.google.apphosting.runtime.security.CustomSecurityManager.checkPermission(CustomSecurityManager.java:56)
 at java.lang.ClassLoader.checkClassLoaderPermission(ClassLoader.java:1606)
 at java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1525)
 at
 org.apache.logging.log4j.util.LoaderUtil.findUrlResources(LoaderUtil.java:192)
 at
 org.apache.logging.log4j.util.LoaderUtil.findResources(LoaderUtil.java:183)
 at
 org.apache.logging.log4j.util.PropertiesUtil.init(PropertiesUtil.java:90)
 at
 org.apache.logging.log4j.util.PropertiesUtil.clinit(PropertiesUtil.java:36)


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Bean Validation Plugin in 2.5

[Johannes Geppert]

Thanks Umesh, I will take a look at it.
I will check if we can reuse some current showcase validation examples.

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-05-27 21:38 GMT+02:00 Umesh Awasthi umeshawas...@gmail.com:

 Thanks Johannes,

 I created struts2-jsr303-example (
 https://github.com/strutsathon/struts2-jsr303-example) , not tested it for
 very long
 If needed, I can work on it to fix it

 Thanks
 Umesh

 On Wed, May 27, 2015 at 12:18 PM, Johannes Geppert jo...@apache.org
 wrote:

  Just pushed first version of new bean validation plugin.
  In general it is based on Umesh works, but I renamed some thinks and made
  some small improvements.
  Also I added some first basic test cases. Would be nice if someone likes
 to
  try the new bean validation plugin.
 
  Next step is preparing a example in the showcase app.
 
  Johannes
 
  #
  web: http://www.jgeppert.com
  twitter: http://twitter.com/jogep
 
 
  2015-05-22 8:32 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:
 
   2015-05-22 8:28 GMT+02:00 Johannes Geppert joh...@gmail.com:
That's great Umesh!
   
@Lukasz
Is maybe a ICLA required for that?
  
   Good question but I assumed no if this will be contributed via
   patch/GitHub PR - it's the same as others do
  
After import I would suggest to rename it to bean-validation-plugin.
I think having a specific JSR number in the name is confusing people
  they
don't know it.
And if we later some other JSR's are following for bean validation it
  is
not correct anymore.
  
   +1
  
  
   Regards
   --
   Łukasz
   + 48 606 323 122 http://www.lenart.org.pl/
  
   -
   To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
   For additional commands, e-mail: dev-h...@struts.apache.org
  
  
 



 --
 With Regards
 Umesh Awasthi
 http://www.travellingrants.com/

Re: Bean Validation Plugin in 2.5

[Johannes Geppert]

Just pushed first version of new bean validation plugin.
In general it is based on Umesh works, but I renamed some thinks and made
some small improvements.
Also I added some first basic test cases. Would be nice if someone likes to
try the new bean validation plugin.

Next step is preparing a example in the showcase app.

Johannes

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-05-22 8:32 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-05-22 8:28 GMT+02:00 Johannes Geppert joh...@gmail.com:
  That's great Umesh!
 
  @Lukasz
  Is maybe a ICLA required for that?

 Good question but I assumed no if this will be contributed via
 patch/GitHub PR - it's the same as others do

  After import I would suggest to rename it to bean-validation-plugin.
  I think having a specific JSR number in the name is confusing people they
  don't know it.
  And if we later some other JSR's are following for bean validation it is
  not correct anymore.

 +1


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Starting work on 2.5

[Johannes Geppert]

+1 for JDK7



#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-05-26 9:39 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-05-26 9:36 GMT+02:00 Greg Huber gregh3...@gmail.com:
  Been using struts with jdk1.7.0_xx for ages and no issues.

 Thanks Greg! Just wondering if someone is using JDK6 these days? :)
 JDK7 is out of business now so maybe it's a good idea to support the
 last out-of-public-updates version which means JDK7


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: [1/3] struts git commit: Cleanup struts2 showcase after removing of deprecated plugins

[Johannes Geppert]

Oh sorry! just stepped over this during build.

#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-05-25 12:13 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 hehe... I have started the same yesterday but didn't finish :) Thanks
 for taking care!

 2015-05-25 12:12 GMT+02:00  jo...@apache.org:
  Repository: struts
  Updated Branches:
refs/heads/master 17d73d21a - ffe0e20ed
 
 
 
 http://git-wip-us.apache.org/repos/asf/struts/blob/ffe0e20e/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_1.jsp
  --
  diff --git a/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_1.jsp
 b/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_1.jsp
  deleted file mode 100644
  index a96ab7a..000
  --- a/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_1.jsp
  +++ /dev/null
  @@ -1,52 +0,0 @@
  -%
  -request.setAttribute(decorator, none);
  -response.setHeader(Cache-Control,no-cache); //HTTP 1.1
  -response.setHeader(Pragma,no-cache); //HTTP 1.0
  -response.setDateHeader (Expires, 0); //prevents caching at the
 proxy server
  -%
  -p
  -bPrint property value, using the iproperty tag/i/b
  -/p
  -p
  -On the OGNL demo you learned how to access values from the Value
 Stack using OGNL expressions.
  -The iproperty/i tag is used to print to the page the result of
 an OGNL expression. The expression
  -is specified in the ivalue/i attribute.
  -/p
  -pTo print the value of the expression iname/i to the page type:
  -p
  -i id=example0
  -lt;s:property value=quot;namequot; /gt;
  -/i
  -/p
  -p
  -on the JSP console and hit enter. a href=#
 onclick=execJSP('example0')Do it for me/a
  -/p
  -p
  -As you saw in the OGNL demo, to print a property of an object that
 is not on top of the stack,
  -use the i#object.property/i notation.
  -/p
  -pTo print the value for the key struts.view_uri in irequest/i
 to the page type:
  -p
  -i id=example1
  -lt;s:property value=quot;#request['struts.view_uri']quot;
 /gt;
  -/i
  -/p
  -p
  -on the JSP console and hit enter. a href=#
 onclick=execJSP('example1')Do it for me/a
  -/p
  -p
  -bPrint property value, using the i$/i operator/b
  -/p
  -pUse the i${name}/i notation to print values from the Value Stack
 to the page.
  -pTo print the value of the expression iname/i to the page type:
  -p
  -i id=example2
  -#36;{name}
  -/i
  -/p
  -p
  -on the JSP console and hit enter. a href=#
 onclick=execJSP('example2')Do it for me/a
  -/p
  -p
  -a href=# onclick=window.open('
 http://struts.apache.org/2.x/docs/property.html')[More details]/a
  -/p
 
 
 http://git-wip-us.apache.org/repos/asf/struts/blob/ffe0e20e/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_2.jsp
  --
  diff --git a/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_2.jsp
 b/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_2.jsp
  deleted file mode 100644
  index 565a7ec..000
  --- a/apps/showcase/src/main/webapp/WEB-INF/interactive/jsp_2.jsp
  +++ /dev/null
  @@ -1,54 +0,0 @@
  -%
  -request.setAttribute(decorator, none);
  -response.setHeader(Cache-Control,no-cache); //HTTP 1.1
  -response.setHeader(Pragma,no-cache); //HTTP 1.0
  -response.setDateHeader (Expires, 0); //prevents caching at the
 proxy server
  -%
  -p
  -biif/i tag/b
  -/p
  -p
  -The iif/i tag allows you to optionally execute a JSP section.
 Multiple ielseif/i tags
  -and one ielse/i tag can be associated to an iif tag/i.
  -/p
  -p
  -To say hello to John Galt type:
  -/p
  -p
  -pre id=example0
  -lt;s:if test=name == 'John Galt'gt;
  -Hi John
  -lt;/s:ifgt;
  -lt;s:elsegt;
  -I don't know you!
  -lt;/s:elsegt;
  -/pre
  -/p
  -p
  -on the JSP console and hit enter. a href=#
 onclick=execJSP('example0')Do it for me/a
  -/p
  -p
  -biiterator/i tag/b
  -/p
  -p
  -The iiterator/i tag loops over an iIterable/i object one
 object at a time into
  -the Value Stack (the value will be on top of the stack).
  -/p
  -p
  -To print the all the elements in the bands property type:
  -/p
  -p
  -pre id=example1
  -lt;s:iterator value=bandsgt;
  -lt;s:property /gt;
  -lt;br /gt;
  -lt;/s:iteratorgt;
  -/pre
  -/p
  -p
  -on the JSP console and hit enter. a href=#
 onclick=execJSP('example1')Do it for me/a
  -/p
  -p
  -a href=# onclick=window.open('
 http://struts.apache.org/2.x/docs/property.html')[More on the iif/i
 tag]/a
  -a href=# onclick=window.open('
 http://struts.apache.org/2.x/docs/iterator.html')[More on the
 iiterator/i tag]/a
  -/p
  \ No newline at end of file
 
 
 

Re: Bean Validation Plugin in 2.5

[Johannes Geppert]

That's great Umesh!

@Lukasz
Is maybe a ICLA required for that?

After import I would suggest to rename it to bean-validation-plugin.
I think having a specific JSR number in the name is confusing people they
don't know it.
And if we later some other JSR's are following for bean validation it is
not correct anymore.

Johannes


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep

2015-05-21 20:10 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-05-21 18:24 GMT+02:00 Umesh Awasthi umeshawas...@gmail.com:
  I am more than happy to donate the plugin. Please let me know what need
 to
  be done from my end for this.

 Great! There are two options:
 - prepare a patch and attach it to a JIRA ticket
 - prepare a PR on GitHub and register task in the JIRA

 in both options creating ticket in JIRA is required


 Thanks!
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org

Re: Starting work on 2.5

[Johannes Geppert]

 It was already there, I assumed it was you when you were working on
 adding support for Portlet 2 spec

Right! This is the old one which was replaced with the new portlet2 spec
implementation.


#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep


2015-05-22 15:46 GMT+02:00 Lukasz Lenart lukaszlen...@apache.org:

 2015-05-22 13:40 GMT+02:00 Rene Gielen gie...@it-neering.net:
  While it is OK for me to drop GitFlow, I'm -1 for moving core
  development to GitHub. We should not rely on an external service for our
  internal workflow. GitHub should remain the interface for external
  contributors, but not the place where the committership driven
  development should take place. I'm pretty sure we'll get in trouble
  justifying such a move towards the board.

 I'm not saying that we must use GH for everything, but instead
 scattering people's repos I prefer working on my own clone or local
 branch. Each branch pushed into Apache Git will be replicated to
 GitHub and then to users' repos.

  Basides that, what was the reasoning behind deprecating
  struts2-portlet-plugin? Did I miss something?

 It was already there, I assumed it was you when you were working on
 adding support for Portlet 2 spec


 Regards
 --
 Łukasz
 + 48 606 323 122 http://www.lenart.org.pl/

 -
 To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
 For additional commands, e-mail: dev-h...@struts.apache.org