AW: Struts2 Validator failing constructor call

2024-04-12 Thread s.goetz
Our path was 2.3.4.1 -> 2.3.24.1 -> 2.5.xx (2, 26, 30) -> 6.0.0 -> 6.1.1 -> 
6.1.2.1 -> 6.3.0.2 (but I left out some minor upgrades)
Currently we are in OpenJDK 17.

By the way, . I was a bit to fast with my last reply.
I cannot see how to override the SecurityMemberAccess at all as it is tied 
statically in the code (version 6.3.0.2):

protected Map createDefaultContext(Object root, ClassResolver 
classResolver) {
ClassResolver resolver = classResolver;
if (resolver == null) {
resolver = container.getInstance(CompoundRootAccessor.class);
}

SecurityMemberAccess memberAccess = new 
SecurityMemberAccess(allowStaticFieldAccess);
memberAccess.disallowProxyMemberAccess(disallowProxyMemberAccess);

if (devMode) {
if (!warnReported.get()) {
warnReported.set(true);
LOG.warn("Working in devMode, using devMode excluded classes 
and packages!");
}
memberAccess.useExcludedClasses(devModeExcludedClasses);

memberAccess.useExcludedPackageNamePatterns(devModeExcludedPackageNamePatterns);
memberAccess.useExcludedPackageNames(devModeExcludedPackageNames);

memberAccess.useExcludedPackageExemptClasses(devModeExcludedPackageExemptClasses);
} else {
memberAccess.useExcludedClasses(excludedClasses);

memberAccess.useExcludedPackageNamePatterns(excludedPackageNamePatterns);
memberAccess.useExcludedPackageNames(excludedPackageNames);

memberAccess.useExcludedPackageExemptClasses(excludedPackageExemptClasses);
}

return Ognl.createDefaultContext(root, memberAccess, resolver, 
defaultConverter);
}

-Ursprüngliche Nachricht-
Von: Lukasz Lenart  
Gesendet: Freitag, 12. April 2024 09:07
An: Struts Users Mailing List 
Betreff: Re: Struts2 Validator failing constructor call

pt., 12 kwi 2024 o 08:19  napisał(a):
>
> Sorry for missing the Struts version. We are on 6.3.0.2 and can't wait to 
> move on to 7 along with JDK 21 😊

Did you migrate from 6.2 recently? And what Java version do you use?


Cheers
Lulasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org



-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org



Re: Struts2 Validator failing constructor call

2024-04-12 Thread Lukasz Lenart
pt., 12 kwi 2024 o 08:19  napisał(a):
>
> Sorry for missing the Struts version. We are on 6.3.0.2 and can't wait to 
> move on to 7 along with JDK 21 😊

Did you migrate from 6.2 recently? And what Java version do you use?


Cheers
Lulasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org