[jira] [Commented] (WW-4941) [jar_cache] Some jar_cache******.tmp files are generated into a temporary directory(/tmp) during web service start
[ https://issues.apache.org/jira/browse/WW-4941?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603833#comment-16603833 ] Zhenou Yun commented on WW-4941: I really appreciate it > [jar_cache] Some jar_cache**.tmp files are generated into a temporary > directory(/tmp) during web service start > -- > > Key: WW-4941 > URL: https://issues.apache.org/jira/browse/WW-4941 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.16 > Environment: [root@zoyunrhel72 /]# java -version > openjdk version "1.8.0_65" > OpenJDK Runtime Environment (build 1.8.0_65-b17) > OpenJDK 64-Bit Server VM (build 25.65-b01, mixed mode) > > WebSphere Application Server Liberty Profile (WLP) 18.0.0.1 >Reporter: Zhenou Yun >Assignee: Yasser Zamani >Priority: Major > Fix For: 2.5.18 > > > {color:#FF}For 2.5.16{color}, some jar_cache.tmp files are generated > into a temporary directory(/tmp) during web service start. ** ** *I > switch struts version to {color:#FF}2.5.14.1{color}, this issue is gone.* > After WEBGUI starts, there are 33 jar_file* generated under /tmp. > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache1062642631821365399.tmp > -rw-r- 1 hhuo lsf 1635203 Jun 7 11:41 jar_cache1209769631075084218.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache1567107336814663613.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache1587734339761593574.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache2246035098413560545.tmp > -rw-r- 1 hhuo lsf 664668 Jun 7 11:41 jar_cache2955460173372365990.tmp > -rw-r- 1 hhuo lsf 664668 Jun 7 11:41 jar_cache3055770203325640987.tmp > -rw-r- 1 hhuo lsf 1635203 Jun 7 11:41 jar_cache3181781479183365298.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache3410461668503420325.tmp > -rw-r- 1 hhuo lsf 664668 Jun 7 11:41 jar_cache3727162596974609876.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache3953777553761520869.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache4367774407759725596.tmp > -rw-r- 1 hhuo lsf 79538 Jun 7 11:41 jar_cache4389938255920249675.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache452712732091101706.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache4621119266592243199.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache4770538017484682889.tmp > -rw-r- 1 hhuo lsf 22352 Jun 7 11:41 jar_cache4831026455305699506.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache5285510309933422446.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache598875146914236683.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache600889074722179084.tmp > -rw-r- 1 hhuo lsf 664668 Jun 7 11:41 jar_cache6110581355322169203.tmp > -rw-r- 1 hhuo lsf 79538 Jun 7 11:41 jar_cache6134039056868249228.tmp > -rw-r- 1 hhuo lsf 664668 Jun 7 11:41 jar_cache623083199754750962.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache6767943121948014749.tmp > -rw-r- 1 hhuo lsf 1635203 Jun 7 11:41 jar_cache6919148036198603364.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache6930144757804709728.tmp > -rw-r- 1 hhuo lsf 1108674 Jun 7 11:41 jar_cache7129866684690345107.tmp > -rw-r- 1 hhuo lsf 22352 Jun 7 11:41 jar_cache714176327233318065.tmp > -rw-r- 1 hhuo lsf 22352 Jun 7 11:41 jar_cache8089516361791789756.tmp -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (WW-4954) xml-validation fails since struts 2.5.17
[ https://issues.apache.org/jira/browse/WW-4954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603388#comment-16603388 ] Hudson commented on WW-4954: SUCCESS: Integrated in Jenkins build Struts-master-JDK7 #142 (See [https://builds.apache.org/job/Struts-master-JDK7/142/]) WW-4954 Moves XWorkList out of util package (lukaszlenart: rev f523a341d474eddbc6c941ddbb1d843c743603ca) * (delete) core/src/test/java/com/opensymphony/xwork2/util/XWorkListTest.java * (add) core/src/test/java/com/opensymphony/xwork2/conversion/impl/XWorkListTest.java * (delete) core/src/main/java/com/opensymphony/xwork2/util/XWorkList.java * (add) core/src/main/java/com/opensymphony/xwork2/conversion/impl/XWorkList.java * (edit) core/src/main/java/com/opensymphony/xwork2/conversion/impl/CollectionConverter.java > xml-validation fails since struts 2.5.17 > > > Key: WW-4954 > URL: https://issues.apache.org/jira/browse/WW-4954 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.17 >Reporter: Fechner >Assignee: Lukasz Lenart >Priority: Major > Fix For: 2.6, 2.3.36, 2.5.18 > > Attachments: KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml.alt, KundenAction.java, > ValidatorArrayListSize.java, ValidatorArrayListSize.java, > email_festnetz_email-arrayListStringeSize_festnetz-arrayListStringeSize_otherinvalideValues.png, > email_festnetz_email-arrayListStringeSize_festnetz-fieldexpression.png, > email_festnetz_email-fieldexpression_festnetz-fieldexpression.png, > kundenNeuanlegenAdresse.jspf, kundenVerwaltung.xml, > mitarbeiterVerwaltung.xml, produktVerwaltung.xml, struts.xml > > > xml-Validation of "s:optiontransferselect" and "s:inputtransferselect" fails > since version 2.5.17. > Until version 2.5.16 xml-validation works fine. > Example : > inputtransferselect: > {code:xml} > label="%\{getText('adresse.email')}" > > name="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > > list="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > id="eingabeEmailAdresseKuAnschrift" > cssClass="inputoptionselect" > addLabel="%\{getText('add')}" > removeLabel="%\{getText('remove')}" > removeAllLabel="%\{getText('removeAll')}" > buttonCssClass="navibutton" > allowUpDown="false" > requiredLabel="true" > > tooltip="%\{getText('tooltip.adresse.email')}" > tooltipIconPath="/images/question.gif" > /> > {code} > {code} > "../../../../xwork-validator-1.0.3.dtd"> > > > > > > > > > > > > > > > > {code} > optiontransferselect: > {code:xml} > > id="idListe" > label="%\{getText('pk.klasse.gebiet')}" > name="idListe" > leftTitle="%\{getText('produkt.ag.links')}" > rightTitle="%\{getText('produkt.ag.rechts')}" > list="%\{#session.listeLinks}" > listKey="id" > listValue="anzeige" > multiple="true" > size="15" > cssClass="input_text" > requiredLabel="true" > > buttonCssClass="navibutton" > allowSelectAll="false" > allowUpDownOnLeft="false" > allowUpDownOnRight="false" > allowAddAllToLeft="false" > allowAddAllToRight="false" > addToLeftLabel="%\{getText('remove')}" > addToRightLabel="%\{getText('add')}" > doubleList="%\{#session.listeRechts}" > doubleListKey="id" > doubleListValue="anzeige" > doubleName="selectedIdListe" > doubleSize="15" > doubleCssClass="input_text" > /> > {code} > I hope You can helb > Best regards > Siegfried Fechner > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (WW-4954) xml-validation fails since struts 2.5.17
[ https://issues.apache.org/jira/browse/WW-4954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603365#comment-16603365 ] ASF GitHub Bot commented on WW-4954: aleksandr-m closed pull request #249: WW-4954 Moves XWorkList out of util package URL: https://github.com/apache/struts/pull/249 This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org > xml-validation fails since struts 2.5.17 > > > Key: WW-4954 > URL: https://issues.apache.org/jira/browse/WW-4954 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.17 >Reporter: Fechner >Assignee: Lukasz Lenart >Priority: Major > Fix For: 2.6, 2.3.36, 2.5.18 > > Attachments: KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml.alt, KundenAction.java, > ValidatorArrayListSize.java, ValidatorArrayListSize.java, > email_festnetz_email-arrayListStringeSize_festnetz-arrayListStringeSize_otherinvalideValues.png, > email_festnetz_email-arrayListStringeSize_festnetz-fieldexpression.png, > email_festnetz_email-fieldexpression_festnetz-fieldexpression.png, > kundenNeuanlegenAdresse.jspf, kundenVerwaltung.xml, > mitarbeiterVerwaltung.xml, produktVerwaltung.xml, struts.xml > > > xml-Validation of "s:optiontransferselect" and "s:inputtransferselect" fails > since version 2.5.17. > Until version 2.5.16 xml-validation works fine. > Example : > inputtransferselect: > {code:xml} > label="%\{getText('adresse.email')}" > > name="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > > list="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > id="eingabeEmailAdresseKuAnschrift" > cssClass="inputoptionselect" > addLabel="%\{getText('add')}" > removeLabel="%\{getText('remove')}" > removeAllLabel="%\{getText('removeAll')}" > buttonCssClass="navibutton" > allowUpDown="false" > requiredLabel="true" > > tooltip="%\{getText('tooltip.adresse.email')}" > tooltipIconPath="/images/question.gif" > /> > {code} > {code} > "../../../../xwork-validator-1.0.3.dtd"> > > > > > > > > > > > > > > > > {code} > optiontransferselect: > {code:xml} > > id="idListe" > label="%\{getText('pk.klasse.gebiet')}" > name="idListe" > leftTitle="%\{getText('produkt.ag.links')}" > rightTitle="%\{getText('produkt.ag.rechts')}" > list="%\{#session.listeLinks}" > listKey="id" > listValue="anzeige" > multiple="true" > size="15" > cssClass="input_text" > requiredLabel="true" > > buttonCssClass="navibutton" > allowSelectAll="false" > allowUpDownOnLeft="false" > allowUpDownOnRight="false" > allowAddAllToLeft="false" > allowAddAllToRight="false" > addToLeftLabel="%\{getText('remove')}" > addToRightLabel="%\{getText('add')}" > doubleList="%\{#session.listeRechts}" > doubleListKey="id" > doubleListValue="anzeige" > doubleName="selectedIdListe" > doubleSize="15" > doubleCssClass="input_text" > /> > {code} > I hope You can helb > Best regards > Siegfried Fechner > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (WW-4954) xml-validation fails since struts 2.5.17
[ https://issues.apache.org/jira/browse/WW-4954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603366#comment-16603366 ] ASF subversion and git services commented on WW-4954: - Commit f523a341d474eddbc6c941ddbb1d843c743603ca in struts's branch refs/heads/master from [~lukaszlenart] [ https://gitbox.apache.org/repos/asf?p=struts.git;h=f523a34 ] WW-4954 Moves XWorkList out of util package > xml-validation fails since struts 2.5.17 > > > Key: WW-4954 > URL: https://issues.apache.org/jira/browse/WW-4954 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.17 >Reporter: Fechner >Assignee: Lukasz Lenart >Priority: Major > Fix For: 2.6, 2.3.36, 2.5.18 > > Attachments: KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml.alt, KundenAction.java, > ValidatorArrayListSize.java, ValidatorArrayListSize.java, > email_festnetz_email-arrayListStringeSize_festnetz-arrayListStringeSize_otherinvalideValues.png, > email_festnetz_email-arrayListStringeSize_festnetz-fieldexpression.png, > email_festnetz_email-fieldexpression_festnetz-fieldexpression.png, > kundenNeuanlegenAdresse.jspf, kundenVerwaltung.xml, > mitarbeiterVerwaltung.xml, produktVerwaltung.xml, struts.xml > > > xml-Validation of "s:optiontransferselect" and "s:inputtransferselect" fails > since version 2.5.17. > Until version 2.5.16 xml-validation works fine. > Example : > inputtransferselect: > {code:xml} > label="%\{getText('adresse.email')}" > > name="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > > list="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > id="eingabeEmailAdresseKuAnschrift" > cssClass="inputoptionselect" > addLabel="%\{getText('add')}" > removeLabel="%\{getText('remove')}" > removeAllLabel="%\{getText('removeAll')}" > buttonCssClass="navibutton" > allowUpDown="false" > requiredLabel="true" > > tooltip="%\{getText('tooltip.adresse.email')}" > tooltipIconPath="/images/question.gif" > /> > {code} > {code} > "../../../../xwork-validator-1.0.3.dtd"> > > > > > > > > > > > > > > > > {code} > optiontransferselect: > {code:xml} > > id="idListe" > label="%\{getText('pk.klasse.gebiet')}" > name="idListe" > leftTitle="%\{getText('produkt.ag.links')}" > rightTitle="%\{getText('produkt.ag.rechts')}" > list="%\{#session.listeLinks}" > listKey="id" > listValue="anzeige" > multiple="true" > size="15" > cssClass="input_text" > requiredLabel="true" > > buttonCssClass="navibutton" > allowSelectAll="false" > allowUpDownOnLeft="false" > allowUpDownOnRight="false" > allowAddAllToLeft="false" > allowAddAllToRight="false" > addToLeftLabel="%\{getText('remove')}" > addToRightLabel="%\{getText('add')}" > doubleList="%\{#session.listeRechts}" > doubleListKey="id" > doubleListValue="anzeige" > doubleName="selectedIdListe" > doubleSize="15" > doubleCssClass="input_text" > /> > {code} > I hope You can helb > Best regards > Siegfried Fechner > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (WW-4954) xml-validation fails since struts 2.5.17
[ https://issues.apache.org/jira/browse/WW-4954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603368#comment-16603368 ] ASF subversion and git services commented on WW-4954: - Commit cf7cd1f6717158998fe2608c960719412e3a4776 in struts's branch refs/heads/master from [~aleksandr-m] [ https://gitbox.apache.org/repos/asf?p=struts.git;h=cf7cd1f ] Merge pull request #249 from apache/WW-4954-struts-2-5 WW-4954 Moves XWorkList out of util package > xml-validation fails since struts 2.5.17 > > > Key: WW-4954 > URL: https://issues.apache.org/jira/browse/WW-4954 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.17 >Reporter: Fechner >Assignee: Lukasz Lenart >Priority: Major > Fix For: 2.6, 2.3.36, 2.5.18 > > Attachments: KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml.alt, KundenAction.java, > ValidatorArrayListSize.java, ValidatorArrayListSize.java, > email_festnetz_email-arrayListStringeSize_festnetz-arrayListStringeSize_otherinvalideValues.png, > email_festnetz_email-arrayListStringeSize_festnetz-fieldexpression.png, > email_festnetz_email-fieldexpression_festnetz-fieldexpression.png, > kundenNeuanlegenAdresse.jspf, kundenVerwaltung.xml, > mitarbeiterVerwaltung.xml, produktVerwaltung.xml, struts.xml > > > xml-Validation of "s:optiontransferselect" and "s:inputtransferselect" fails > since version 2.5.17. > Until version 2.5.16 xml-validation works fine. > Example : > inputtransferselect: > {code:xml} > label="%\{getText('adresse.email')}" > > name="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > > list="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > id="eingabeEmailAdresseKuAnschrift" > cssClass="inputoptionselect" > addLabel="%\{getText('add')}" > removeLabel="%\{getText('remove')}" > removeAllLabel="%\{getText('removeAll')}" > buttonCssClass="navibutton" > allowUpDown="false" > requiredLabel="true" > > tooltip="%\{getText('tooltip.adresse.email')}" > tooltipIconPath="/images/question.gif" > /> > {code} > {code} > "../../../../xwork-validator-1.0.3.dtd"> > > > > > > > > > > > > > > > > {code} > optiontransferselect: > {code:xml} > > id="idListe" > label="%\{getText('pk.klasse.gebiet')}" > name="idListe" > leftTitle="%\{getText('produkt.ag.links')}" > rightTitle="%\{getText('produkt.ag.rechts')}" > list="%\{#session.listeLinks}" > listKey="id" > listValue="anzeige" > multiple="true" > size="15" > cssClass="input_text" > requiredLabel="true" > > buttonCssClass="navibutton" > allowSelectAll="false" > allowUpDownOnLeft="false" > allowUpDownOnRight="false" > allowAddAllToLeft="false" > allowAddAllToRight="false" > addToLeftLabel="%\{getText('remove')}" > addToRightLabel="%\{getText('add')}" > doubleList="%\{#session.listeRechts}" > doubleListKey="id" > doubleListValue="anzeige" > doubleName="selectedIdListe" > doubleSize="15" > doubleCssClass="input_text" > /> > {code} > I hope You can helb > Best regards > Siegfried Fechner > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (WW-4954) xml-validation fails since struts 2.5.17
[ https://issues.apache.org/jira/browse/WW-4954?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16603367#comment-16603367 ] ASF subversion and git services commented on WW-4954: - Commit cf7cd1f6717158998fe2608c960719412e3a4776 in struts's branch refs/heads/master from [~aleksandr-m] [ https://gitbox.apache.org/repos/asf?p=struts.git;h=cf7cd1f ] Merge pull request #249 from apache/WW-4954-struts-2-5 WW-4954 Moves XWorkList out of util package > xml-validation fails since struts 2.5.17 > > > Key: WW-4954 > URL: https://issues.apache.org/jira/browse/WW-4954 > Project: Struts 2 > Issue Type: Bug >Affects Versions: 2.5.17 >Reporter: Fechner >Assignee: Lukasz Lenart >Priority: Major > Fix For: 2.6, 2.3.36, 2.5.18 > > Attachments: KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml, > KundenAction-kundenAdrUebernehmen-validation.xml.alt, KundenAction.java, > ValidatorArrayListSize.java, ValidatorArrayListSize.java, > email_festnetz_email-arrayListStringeSize_festnetz-arrayListStringeSize_otherinvalideValues.png, > email_festnetz_email-arrayListStringeSize_festnetz-fieldexpression.png, > email_festnetz_email-fieldexpression_festnetz-fieldexpression.png, > kundenNeuanlegenAdresse.jspf, kundenVerwaltung.xml, > mitarbeiterVerwaltung.xml, produktVerwaltung.xml, struts.xml > > > xml-Validation of "s:optiontransferselect" and "s:inputtransferselect" fails > since version 2.5.17. > Until version 2.5.16 xml-validation works fine. > Example : > inputtransferselect: > {code:xml} > label="%\{getText('adresse.email')}" > > name="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > > list="kuAnschrift.kontaktMittel.eingabeEmailAdresse" > id="eingabeEmailAdresseKuAnschrift" > cssClass="inputoptionselect" > addLabel="%\{getText('add')}" > removeLabel="%\{getText('remove')}" > removeAllLabel="%\{getText('removeAll')}" > buttonCssClass="navibutton" > allowUpDown="false" > requiredLabel="true" > > tooltip="%\{getText('tooltip.adresse.email')}" > tooltipIconPath="/images/question.gif" > /> > {code} > {code} > "../../../../xwork-validator-1.0.3.dtd"> > > > > > > > > > > > > > > > > {code} > optiontransferselect: > {code:xml} > > id="idListe" > label="%\{getText('pk.klasse.gebiet')}" > name="idListe" > leftTitle="%\{getText('produkt.ag.links')}" > rightTitle="%\{getText('produkt.ag.rechts')}" > list="%\{#session.listeLinks}" > listKey="id" > listValue="anzeige" > multiple="true" > size="15" > cssClass="input_text" > requiredLabel="true" > > buttonCssClass="navibutton" > allowSelectAll="false" > allowUpDownOnLeft="false" > allowUpDownOnRight="false" > allowAddAllToLeft="false" > allowAddAllToRight="false" > addToLeftLabel="%\{getText('remove')}" > addToRightLabel="%\{getText('add')}" > doubleList="%\{#session.listeRechts}" > doubleListKey="id" > doubleListValue="anzeige" > doubleName="selectedIdListe" > doubleSize="15" > doubleCssClass="input_text" > /> > {code} > I hope You can helb > Best regards > Siegfried Fechner > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (WW-4957) Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used instead.
[ https://issues.apache.org/jira/browse/WW-4957?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Konstantinos updated WW-4957: - Description: I have an application that uses struts version 2.5.10.1. i want to update it to version 2.5.17 after the announcement of the Apache Software Foundation that Struts 2.5 to 2.5.16 versions are vulnerable to remote attackers. In my current version i use a struts-core library class called LocalizedTextUtil to load messages from the global message bundle. My code below: {code:java} private void initialiseMessageBundle() throws InitializationError{ LOG.info("Loading global messages from " + DEFAULT_RESOURCE); URL[] urls; try { String resourceFolder = PropertiesManager.get(Constants.PROP_RESOURCES_FOLDER); File file = new File(resourceFolder); if (!file.exists() || !file.isDirectory()){ LOG.error("file not found: path(" + Constants.PROP_RESOURCES_FOLDER + ") = " + resourceFolder); throw new InitializationError("External resource not found file not found"); } else { LOG.debug("resources file: " + file.toURI().toURL()); } URL url = file.toURI().toURL(); urls = new URL[]{url}; ClassLoader cl = new URLClassLoader(urls); LocalizedTextUtil.setDelegatedClassLoader(cl); LocalizedTextUtil.addDefaultResourceBundle("global"); } catch (MalformedURLException e) { throw new InitializationError("MalformedURLException occured during the messageBundle initialisation", e); } LOG.info("Global messages loaded."); } {code} After updating the struts version to 2.5.17 the *LocalizedTextUtil* class is removed. Although i create a new instance of class *GlobalLocalizedTextProvider* and *StrutsLocalizedTextProvider* and used the same methods (*setDelegatedClassLoader*,*addDefaultResourceBundle*) my messages are not been loaded. Also i create a bean of these classes on struts.xml and tried to inject it but again without success. Do you have any thought how can i replace the LocalizedTextUtil in my code above? Thank you. was: I have an application that uses struts version 2.5.10.1. i want to update it to version 2.5.17 after the announcement of the Apache Software Foundation that Struts 2.5 to 2.5.16 versions are vulnerable to remote attackers. In my current version i use a struts-core library class called LocalizedTextUtil to load messages from the global message bundle. My code below: {code:java} private void initialiseMessageBundle() throws InitializationError{ LOG.info("Loading global messages from " + DEFAULT_RESOURCE); URL[] urls; try { String resourceFolder = PropertiesManager.get(Constants.PROP_RESOURCES_FOLDER); File file = new File(resourceFolder); if (!file.exists() || !file.isDirectory()){ LOG.error("file not found: path(" + Constants.PROP_RESOURCES_FOLDER + ") = " + resourceFolder); throw new InitializationError("External resource not found file not found"); } else { LOG.debug("resources file: " + file.toURI().toURL()); } URL url = file.toURI().toURL(); urls = new URL[]{url}; ClassLoader cl = new URLClassLoader(urls); LocalizedTextUtil.setDelegatedClassLoader(cl); LocalizedTextUtil.addDefaultResourceBundle(DEFAULT_RESOURCE); } catch (MalformedURLException e) { throw new InitializationError("MalformedURLException occured during the messageBundle initialisation", e); } LOG.info("Global messages loaded."); } {code} After updating the struts version to 2.5.17 the *LocalizedTextUtil* class is removed. Although i create a new instance of class *GlobalLocalizedTextProvider* and *StrutsLocalizedTextProvider* and used the same methods (*setDelegatedClassLoader*,*addDefaultResourceBundle*) my messages are not been loaded. Also i create a bean of these classes on struts.xml and tried to inject it but again without success. Do you have any thought how can i replace the LocalizedTextUtil in my code above? Thank you. > Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is > removed and GlobalLocalizedTextProvider cannot be > used instead. > --- > > Key: WW-4957 > URL: https://issues.apache.org/jira/browse/WW-4957 > Project: Struts 2 > Issue Type: Bug > Components: Core >Affects Versions: 2.5.17 >Reporter: Konstantinos >Priority: Major > Fix For: 2.5.10.1 > > Original Estimate: 72h > Remaining Estimate: 72h > > I have an application that uses struts version 2.5.10.1. i want to update it > to version 2.5.17 after the
[jira] [Updated] (WW-4957) Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used instead.
[ https://issues.apache.org/jira/browse/WW-4957?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Konstantinos updated WW-4957: - Summary: Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used instead. (was: Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used intead.) > Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is > removed and GlobalLocalizedTextProvider cannot be > used instead. > --- > > Key: WW-4957 > URL: https://issues.apache.org/jira/browse/WW-4957 > Project: Struts 2 > Issue Type: Bug > Components: Core >Affects Versions: 2.5.17 >Reporter: Konstantinos >Priority: Major > Fix For: 2.5.10.1 > > Original Estimate: 72h > Remaining Estimate: 72h > > I have an application that uses struts version 2.5.10.1. i want to update it > to version 2.5.17 after the announcement of the Apache Software Foundation > that Struts 2.5 to 2.5.16 versions are vulnerable to remote attackers. In my > current version i use a struts-core library class called LocalizedTextUtil to > load messages from the global message bundle. My code below: > {code:java} > private void initialiseMessageBundle() throws InitializationError{ > LOG.info("Loading global messages from " + DEFAULT_RESOURCE); > URL[] urls; > try { > String resourceFolder = > PropertiesManager.get(Constants.PROP_RESOURCES_FOLDER); > File file = new File(resourceFolder); > if (!file.exists() || !file.isDirectory()){ > LOG.error("file not found: path(" + > Constants.PROP_RESOURCES_FOLDER + ") = " + resourceFolder); > throw new InitializationError("External resource not found file > not found"); > } else { > LOG.debug("resources file: " + file.toURI().toURL()); > } > URL url = file.toURI().toURL(); > urls = new URL[]{url}; > ClassLoader cl = new URLClassLoader(urls); > LocalizedTextUtil.setDelegatedClassLoader(cl); > LocalizedTextUtil.addDefaultResourceBundle(DEFAULT_RESOURCE); > } catch (MalformedURLException e) { > throw new InitializationError("MalformedURLException occured during > the messageBundle initialisation", e); > } > LOG.info("Global messages loaded."); > } > {code} > > After updating the struts version to 2.5.17 the *LocalizedTextUtil* class is > removed. Although i create a new instance of class > *GlobalLocalizedTextProvider* and *StrutsLocalizedTextProvider* and used the > same methods (*setDelegatedClassLoader*,*addDefaultResourceBundle*) my > messages are not been loaded. Also i create a bean of these classes on > struts.xml and tried to inject it but again without success. Do you have any > thought how can i replace the LocalizedTextUtil in my code above? > Thank you. > -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Created] (WW-4957) Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used intead.
Konstantinos created WW-4957: Summary: Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider cannot be used intead. Key: WW-4957 URL: https://issues.apache.org/jira/browse/WW-4957 Project: Struts 2 Issue Type: Bug Components: Core Affects Versions: 2.5.17 Reporter: Konstantinos Fix For: 2.5.10.1 I have an application that uses struts version 2.5.10.1. i want to update it to version 2.5.17 after the announcement of the Apache Software Foundation that Struts 2.5 to 2.5.16 versions are vulnerable to remote attackers. In my current version i use a struts-core library class called LocalizedTextUtil to load messages from the global message bundle. My code below: {code:java} private void initialiseMessageBundle() throws InitializationError{ LOG.info("Loading global messages from " + DEFAULT_RESOURCE); URL[] urls; try { String resourceFolder = PropertiesManager.get(Constants.PROP_RESOURCES_FOLDER); File file = new File(resourceFolder); if (!file.exists() || !file.isDirectory()){ LOG.error("file not found: path(" + Constants.PROP_RESOURCES_FOLDER + ") = " + resourceFolder); throw new InitializationError("External resource not found file not found"); } else { LOG.debug("resources file: " + file.toURI().toURL()); } URL url = file.toURI().toURL(); urls = new URL[]{url}; ClassLoader cl = new URLClassLoader(urls); LocalizedTextUtil.setDelegatedClassLoader(cl); LocalizedTextUtil.addDefaultResourceBundle(DEFAULT_RESOURCE); } catch (MalformedURLException e) { throw new InitializationError("MalformedURLException occured during the messageBundle initialisation", e); } LOG.info("Global messages loaded."); } {code} After updating the struts version to 2.5.17 the *LocalizedTextUtil* class is removed. Although i create a new instance of class *GlobalLocalizedTextProvider* and *StrutsLocalizedTextProvider* and used the same methods (*setDelegatedClassLoader*,*addDefaultResourceBundle*) my messages are not been loaded. Also i create a bean of these classes on struts.xml and tried to inject it but again without success. Do you have any thought how can i replace the LocalizedTextUtil in my code above? Thank you. -- This message was sent by Atlassian JIRA (v7.6.3#76005)