Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

pon., 29 kwi 2024 o 09:15 SARAVANAN SIVAGURU
 napisał(a):

> I would suggest to align the library version on the struts library as same
> as the tomee one. As both are from Apache community we need to have in
> alignment to make it work as expected.
>

 This is a bad idea to align to a given version of a given Servlet
Container. I would open a PR targeting TomEE with upgraded versions of the
libs. When using Maven you can always use previous versions of the library
by overriding dependency, which should work as well.


Cheers
Lukasz

Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

I upgraded commons-text to ver 1.12.0
https://github.com/apache/struts/pull/924

śr., 24 kwi 2024 o 15:27 SARAVANAN SIVAGURU
 napisał(a):
>
> Hi Luk
>
> Even for 6.4 version am facing the issue irrespective of changing the 
> dependency version or not on common-text.
>
> Thanks and Regards,
> Saravanan.S
> 
> From: SARAVANAN SIVAGURU 
> Sent: Tuesday, April 23, 2024 6:45 PM
> To: Struts Users Mailing List 
> Subject: Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | 
> Testing
>
> Hi Luk
>
> Please find the attachment for the 6.5 version dependency.
>
> Thanks and Regards,
> Saravanan.S
> 
> From: SARAVANAN SIVAGURU 
> Sent: Tuesday, April 23, 2024 2:31 PM
> To: Struts Users Mailing List 
> Subject: Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | 
> Testing
>
> CAUTION: This email originated from outside of the organization. Do not click 
> links or open attachments unless you recognize the sender and know the 
> content is safe.
>
>
> Sure, I will do
>
> Thanks and Regards,
> Saravanan.S
> 
> From: Lukasz Lenart 
> Sent: Tuesday, April 23, 2024 2:29 PM
> To: Struts Users Mailing List 
> Subject: Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | 
> Testing
>
> CAUTION: This email originated from outside of the organization. Do not click 
> links or open attachments unless you recognize the sender and know the 
> content is safe.
>
>
> wt., 23 kwi 2024 o 10:54 SARAVANAN SIVAGURU
>  napisał(a):
>
> > Hi Luk
> >
> > Somehow I was unable to share the report files as a attachment in html
> > format. Am attaching the text file, output of the gradle dependencies
> > command for the my application.
> >
>
> This is for Struts 6.4.0, but could you use Struts 6.5.0-SNAPSHOT and
> re-post the dependencies?
>
>
> Thanks in advance
> Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

wt., 23 kwi 2024 o 10:54 SARAVANAN SIVAGURU
 napisał(a):

> Hi Luk
>
> Somehow I was unable to share the report files as a attachment in html
> format. Am attaching the text file, output of the gradle dependencies
> command for the my application.
>

This is for Struts 6.4.0, but could you use Struts 6.5.0-SNAPSHOT and
re-post the dependencies?


Thanks in advance
Lukasz

Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

pon., 22 kwi 2024 o 22:40 Tellis, Wyatt
 napisał(a):
> We’ve run into this issue as well.  Using the workaround of specifying the 
> location via:
>
> 
>  
> org.apache.tiles.definition.DefinitionsFactory.DEFINITIONS_CONFIG
>  /WEB-INF/tiles.xml
> 
>
> doesn’t work.

You can specify all the files you are using by separating them by comma:
/WEB-INF/tiles1.xml,/WEB-INF/tiles2.xml,/WEB-INF/tiles3.xml


Regards
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 6.4.0 - Announcements 2024

[Lukasz Lenart]

Great, fixed!
https://github.com/apache/struts-site/pull/237

pon., 22 kwi 2024 o 19:51 Brunstein, David 
napisał(a):
>
> Thank you Luckasz!
>
>
>
> https://struts.apache.org/announce-2024.html
>
>
>
>
>
> Please update the link under the Home > Announcements option.
>
>
>
> Thanks (again),
>
> Davo
>
>
>
>
>
> From: Lukasz Lenart 
> Sent: Monday, April 22, 2024 12:46 PM
> To: Brunstein, David 
> Cc: Struts Users Mailing List 
> Subject: Re: Struts2 6.4.0 - Announcements 2024
>
>
>
> Hi David, pon. , 22 kwi 2024 o 19: 42 Brunstein, David  gov. mb. ca> napisał(a): > > Hi Lukasz, > > Are you planning to publish a new 
> Announcements 2024 for the new Struts2 version 6. 4. 0? > The curent page 
> https: //urldefense. com/v3/__https: //struts. apache. org/announce-2023. 
> html__;!!IqQd2s6KUyvHwNLtrw!s5lqv5rBQAYPNiIt8lfep5Sxo8n50fMNSLZVwdrkT6jw21kVME3BwAClogCzdhe9w8L1zgHrGIE9Z0iMlg5HJx96cUREgCs$
>
> Hi David,
>
>
>
> pon., 22 kwi 2024 o 19:42 Brunstein, David 
>
> napisał(a):
>
> >
>
> > Hi Lukasz,
>
> >
>
> > Are you planning to publish a new Announcements 2024 for the new Struts2 
> > version 6.4.0?
>
> > The curent page 
> > https://urldefense.com/v3/__https://struts.apache.org/announce-2023.html__;!!IqQd2s6KUyvHwNLtrw!s5lqv5rBQAYPNiIt8lfep5Sxo8n50fMNSLZVwdrkT6jw21kVME3BwAClogCzdhe9w8L1zgHrGIE9Z0iMlg5HJx96cUREgCs$
>
>
>
> Yes, this was already announced
>
>
>
> https://urldefense.com/v3/__https://lists.apache.org/list.html?announcements@struts.apache.org__;!!IqQd2s6KUyvHwNLtrw!s5lqv5rBQAYPNiIt8lfep5Sxo8n50fMNSLZVwdrkT6jw21kVME3BwAClogCzdhe9w8L1zgHrGIE9Z0iMlg5HJx96W3Cj5gI$
>
> https://urldefense.com/v3/__https://struts.apache.org/announce-2024*a20240419__;Iw!!IqQd2s6KUyvHwNLtrw!s5lqv5rBQAYPNiIt8lfep5Sxo8n50fMNSLZVwdrkT6jw21kVME3BwAClogCzdhe9w8L1zgHrGIE9Z0iMlg5HJx96jcGO8so$
>
>
>
> Cheers
>
> Lukasz
>
>
>
> PS. Please subscribe to the User Mailing List
>
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 6.4.0 - Announcements 2024

[Lukasz Lenart]

Hi David,

pon., 22 kwi 2024 o 19:42 Brunstein, David 
napisał(a):
>
> Hi Lukasz,
>
> Are you planning to publish a new Announcements 2024 for the new Struts2 
> version 6.4.0?
> The curent page https://struts.apache.org/announce-2023.html

Yes, this was already announced

https://lists.apache.org/list.html?announceme...@struts.apache.org
https://struts.apache.org/announce-2024#a20240419

Cheers
Lukasz

PS. Please subscribe to the User Mailing List
https://struts.apache.org/mail.html

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

Could you run "gradle dependencies" and post the outcome?

Re: Struts 6.4.0: is there a Tiles breaking change?

[Lukasz Lenart]

pon., 22 kwi 2024 o 15:16 Matias Rodriguez
 napisał(a):
>
> hi! I'm getting an exception when moving from version *6.3.0.2*; should we
> add some annotations or something? thanks!

> Struts has detected an unhandled exception:
> *Messages*:
> - Cannot find definition named 'indexServidor'

It's probably related to this issue
https://issues.apache.org/jira/browse/WW-5419

You can find a fix here and if you can please test it :)
https://github.com/apache/struts/pull/920


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: WW-5419 - Autoloading of tiles.xml fails in Struts-6.4.0 | Testing

[Lukasz Lenart]

This fix wasn't integrated with the SNAPSHOT version yet - it exists
only in the PR, if you want to test it you must clone the PR locally
and build it.

pon., 22 kwi 2024 o 11:08 SARAVANAN SIVAGURU
 napisał(a):
>
> Hi Luk
>
> Faced any issues during the testing of the fix with 6.5-SNAPSHOT version like 
> below,
>
> java.lang.NoSuchMethodError: 'org.apache.commons.lang3.Range 
> org.apache.commons.lang3.Range.of(java.lang.Comparable, java.lang.Comparable)'
> org.apache.commons.text.translate.NumericEntityEscaper.(NumericEntityEscaper.java:97)
> org.apache.commons.text.translate.NumericEntityEscaper.between(NumericEntityEscaper.java:59)
> org.apache.commons.text.StringEscapeUtils.(StringEscapeUtils.java:271)
> com.opensymphony.xwork2.DefaultActionProxy.(DefaultActionProxy.java:87)
> org.apache.struts2.factory.StrutsActionProxy.(StrutsActionProxy.java:34)
> org.apache.struts2.factory.StrutsActionProxyFactory.createActionProxy(StrutsActionProxyFactory.java:30)
> com.opensymphony.xwork2.DefaultActionProxyFactory.createActionProxy(DefaultActionProxyFactory.java:60)
> org.apache.struts2.dispatcher.Dispatcher.createActionProxy(Dispatcher.java:781)
> org.apache.struts2.dispatcher.Dispatcher.prepareActionProxy(Dispatcher.java:767)
> org.apache.struts2.dispatcher.Dispatcher.serviceAction(Dispatcher.java:730)
> org.apache.struts2.dispatcher.ExecuteOperations.executeAction(ExecuteOperations.java:79)
> org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter.handleRequest(StrutsPrepareAndExecuteFilter.java:163)
> org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter.tryHandleRequest(StrutsPrepareAndExecuteFilter.java:146)
> org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter.doFilter(StrutsPrepareAndExecuteFilter.java:134)
> com.acnielsen.gbs.prd.authentication.GbsAuthenticationFilter.doFilter(GbsAuthenticationFilter.java:86)

Not sure why do you get this, I would clean the workspace first

Did you specify the SNAPSHOT repository? SNAPSHOT versions are not
available in the Maven Central so you must provide additional settings
https://struts.apache.org/builds.html#test-builds

Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Need help to migrate to struts2.5.33 from 2.3.37

[Lukasz Lenart]

sob., 20 kwi 2024 o 14:56 Anweshan Satapathy
 napisał(a):
> 
> struts-prepare
> 
> org.apache.struts2.dispatcher.filter.StrutsPrepareFilter
> 
>
> StrutsPrepareAndExecute
> 
> org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter
> 
>  
> struts-execute
> 
> org.apache.struts2.dispatcher.filter.StrutsExecuteFilter
> 

You cannot use all the filters, either you must use
StrutsPrepareAndExecute filter or combination of StrutsPrepareFilter +
some other filter (eg. Sitemesh) + StrutsExecuteFilter
https://struts.apache.org/core-developers/web-xml

See the last example
https://struts.apache.org/plugins/sitemesh/


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

[ANN] Apache Struts 6.4.0

[Lukasz Lenart]

The Apache Struts group is pleased to announce that Apache Struts
version 6.4.0 is available as a “General Availability” release. The GA
designation is our highest quality grade.

The Apache Struts is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework has been
designed to streamline the full development cycle, from building, to
deploying, to maintaining applications over time.

This version contains a lot of proactive security improvements, which
should make your application hard to compromise.

Please read the Version Notes to find more details about performed bug
fixes and improvements.
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.4.0

All developers are strongly advised to perform this upgrade.

The 6.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 3.1,
JSP API 2.1, and Java 8.

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
https://issues.apache.org/jira/projects/WW/

You can download this version from our download page.
https://struts.apache.org/download.cgi#struts-ga

Regards
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Need help to migrate to struts2.5.33 from 2.3.37

[Lukasz Lenart]

Could you post your web.xml?

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Need help to migrate to struts2.5.33 from 2.3.37

[Lukasz Lenart]

Could you post the whole stacktrace?

PS: Please re-use thread instead of creating a new one

pt., 19 kwi 2024 o 08:16 Anweshan Satapathy 
napisał(a):

> Hi Team
>
> We are trying to migrate from struts 2.3.37 to 2.5.33 updated as per
> confluence page(Struts 2.3 to 2.5 migration - Apache Struts 2 Wiki -
> Apache Software Foundation
> 
> )
>
> We are getting the following errors in eclipse and not able to any link
> related to struts
>
> c.o.xwork2.ognl.OgnlValueStack - Could not find property
> [struts.actionMapping]!
> ognl.NoSuchPropertyException:
> com.opensymphony.xwork2.util.CompoundRoot.struts
> at
> com.opensymphony.xwork2.ognl.accessor.CompoundRootAccessor.getProperty(CompoundRootAccessor.java:158)
> c.o.xwork2.ognl.OgnlValueStack - Could not find property
> [struts.valueStack]!
> ognl.NoSuchPropertyException:
> com.opensymphony.xwork2.util.CompoundRoot.struts
> at
> com.opensymphony.xwork2.ognl.accessor.CompoundRootAccessor.getProperty(CompoundRootAccessor.java:158)
>
> o.a.struts2.dispatcher.Dispatcher - Could not find action or result:
> /CoreWeb/reconciliation/reconciliation_loadReconciliationBalance.action?ORIGIN=LUIGI=en=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Imp3cy1rZXktcHVibGljLTEifQ.eyJzZXJ2aWNlUmVxdWVzdElkIjoiOTJkNjMxOTEtYjA5NC00MDM4LTg3NjMtYzhkN2JiODg0ZDM3IiwidXNlcl9uYW1lIjoiOTJkNjMxOTEtYjA5NC00MDM4LTg3NjMtYzhkN2JiODg0ZDM3IiwiYXV0aG9yaXphdGlvblByb2ZpbGVDb2RlIjoiTmV0YWRtaW5EZWZhdWx0IiwiaWRlbnRpZmllclZhbHVlIjoiU1lTQURNNzc3NzQ1NzgxOCIsImlkZW50aWZpZXJUeXBlIjoiTE9HSU5JRCIsImNhdGVnb3J5Q29kZSI6Ik5XQURNIiwidXNlcklkIjoiVVMuNTkxMjczNjc0MTMwMjUzIiwiZGV2aWNlSWQiOm51bGwsImF1dGhvcml0aWVzIjpbIlJPTEVfVVNFUiJdLCJjbGllbnRfaWQiOi
> com.opensymphony.xwork2.config.ConfigurationException: There is no Action
> mapped for namespace [/reconciliation] and action name
> [reconciliation_loadReconciliationBalance] associated with context path
> [/CoreWeb].
> at
> com.opensymphony.xwork2.DefaultActionProxy.prepare(DefaultActionProxy.java:195)
>
>
> Below are the struts related dependencies used in our project. Please
> suggest ways to migrate to struts 2.5.33 from struts 2.3.37
>

Re: Struts 6.4.0 Release Date

[Lukasz Lenart]

śr., 17 kwi 2024 o 17:18 Pranish Srigiri  napisał(a):
>
> Hi Team,
> We have a major release planned in the next 2 months. For this we need to
> upgrade struts to 6.4.0. We've been waiting for it to get released since
> January. It would be great if we know the release timeline of v6.4.0.

6.4.0 is under Vote now and should be available in a few days.


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Trying to upgrade from struts 2.3 to 2.5-Web links giving 404 error

[Lukasz Lenart]

Did you follow the migration guideline [1]? And please post the whole
stacktrace

[1]
https://cwiki.apache.org/confluence/display/WW/Struts+2.3+to+2.5+migration

śr., 17 kwi 2024 o 14:11 Sunitha Ganapathy
 napisał(a):

> Hi,
>
>
>
> Getting these 3 types of  errors after upgrade.
>
>1. c.o.xwork2.ognl.OgnlValueStack - Could not find property
>[struts.actionMapping]!
>
> ognl.NoSuchPropertyException:
> com.opensymphony.xwork2.util.CompoundRoot.struts
>
> at
> com.opensymphony.xwork2.ognl.accessor.CompoundRootAccessor.getProperty(CompoundRootAccessor.java:158)
>
>
>
>
>
> 2 .c.o.xwork2.ognl.OgnlValueStack - Could not find property
> [struts.valueStack]!
>
> ognl.NoSuchPropertyException:
> com.opensymphony.xwork2.util.CompoundRoot.struts
>
> at
> com.opensymphony.xwork2.ognl.accessor.CompoundRootAccessor.getProperty(CompoundRootAccessor.java:158)
>
> at ognl.OgnlRuntime.getProperty(OgnlRuntime.java:2422)
>
>
>
>3. Could not find action or result:
> /CoreWeb/domainMgmt/confirmAddDomain_addDetails.action?ORIGIN=LUIGI=en=eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6Imp3cy1rZXktcHVibGljLTEifQ.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.G9Na_dprhhfaK0eaBcUVVLr0vVQ-4kaRXK4PLXXjiFCrNZ7mHH7c-jnyqrY3Qdbd4B1zIm7Ce95PO_ECm7awg8baNX4o1OdCRYEWc7yMw3orWlPzhFkEyYo9P6Qe-OGY4Fkn7uccDxTgBmspUDZ3iiMSxwp2D2IeKBYNSToyjiEBXV00DI4O48mlLXV6dJVPUyxTjKSAnXJy9d-Wp43pEVIRzbIVRwkU6Foh28kNl7K43unQ1pbllaeRw5EWFQpwGfahGZPHqA84O6-Bn_M458G9LBG70E1MdaMRDddx-wHVcD6QewG37PZXn5ReM_k0icrfQzNg_VYxVCAUyfWgkA
>
> com.opensymphony.xwork2.config.ConfigurationException: There is no Action
> mapped for namespace [/domainMgmt] and action name
> [confirmAddDomain_addDetails] associated with context path [/CoreWeb].
>
> at
> com.opensymphony.xwork2.DefaultActionProxy.prepare(DefaultActionProxy.java:195)
>
>
>
> Pom used has jars as below.
>
> Please suggest.
>
>
>
> Regards,
>
> Sunitha
>
>
>
>

Re: Struts examples Hello World

[Lukasz Lenart]

niedz., 14 kwi 2024 o 20:56 Tim Mousaw  napisał(a):
>
> I started to go through the Getting Started examples at
> https://struts.apache.org/getting-started/index.html. I downloaded all the
> examples from https://github.com/apache/struts-examples. I would expect
> that I should be able to run `mvn jetty:run` from any of the examples,
> follow the appropriate link, and it should work as in the corresponding
> tutorial. However, this breaks down very quickly as when I try to run that
> for the `helloworld` example, I get the following error in my web browser
> when going to the link http://localhost:8080/helloworld/index.action:
> HTTP ERROR 404 Not Found
> URI: /helloworld/index.action
> STATUS: 404
> MESSAGE: Not Found
> SERVLET: default
> --
> Powered by Jetty:// 9.4.46.v20220331 
>
> With debug logging enabled, navigating to
> localhost:8080/helloworld/index.action spits the following two lines of
> output to the console:
> 2024-04-14 14:44:44,340 DEBUG [qtp273531298-62] config.ConfigurationManager
> (ConfigurationManager.java:180) - Checking ConfigurationProviders for
> reload.
> 2024-04-14 14:44:44,343 DEBUG [qtp273531298-62]
> impl.InstantiatingNullHandler (InstantiatingNullHandler.java:98) - Entering
> nullPropertyValue
> [target=[com.opensymphony.xwork2.DefaultTextProvider@6dbebaa7],
> property=struts]
>
> If I remove the line ""
> from struts.xml, then the example seems to work. It gets the same two lines
> of output to the console followed by:

You are right, by removing this constant you make Struts to fallback
to default configuration [1] which supports both .action and no suffix
in the url

[1] 
https://github.com/apache/struts/blob/master/core/src/main/resources/org/apache/struts2/default.properties#L87

> 2024-04-14 14:51:46,765 DEBUG [qtp273531298-50] xwork2.DefaultActionProxy
> (DefaultActionProxy.java:85) - Creating an DefaultActionProxy for namespace
> [/] and action name [index]
>
> As well as a bunch of other logging after that before the page renders.
> From searching for this configuration, I think the intention of this line
> is to remove the `.action` suffix from the action (e.g. the link in the web
> browser displays localhost:8080/helloworld/index rather than
> http://localhost:8080/helloworld/index.action). So, I'm curious what I have
> configured wrong that doesn't allow this to work. I'm using Java 21
> (Corretto). Let me know if there are other dependencies that you need to
> know the version of.

As you notice what was documented on the page doesn't match the
example Hello World application. So either you can prepare a PR fixing
the documentation or the example app.


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 Validator failing constructor call

[Lukasz Lenart]

pt., 12 kwi 2024 o 09:57  napisał(a):
>
> Our path was 2.3.4.1 -> 2.3.24.1 -> 2.5.xx (2, 26, 30) -> 6.0.0 -> 6.1.1 -> 
> 6.1.2.1 -> 6.3.0.2 (but I left out some minor upgrades)
> Currently we are in OpenJDK 17.

And the problem started with 6.3.0.2? Could you revert to 6.2.0 and
check if everything is ok?


Thanks in advance
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 Validator failing constructor call

[Lukasz Lenart]

pt., 12 kwi 2024 o 08:19  napisał(a):
>
> Sorry for missing the Struts version. We are on 6.3.0.2 and can't wait to 
> move on to 7 along with JDK 21 

Did you migrate from 6.2 recently? And what Java version do you use?


Cheers
Lulasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 Validator failing constructor call

[Lukasz Lenart]

czw., 11 kwi 2024 o 17:07  napisał(a):
> I have a 10 year old struts2 web application that uses validation with rules 
> defined in XML files.

Do you try to migrate to the latest version? What version do you use?

> One of these instantiates a java.util.Date to compare the the value of a bean 
> with the current date:
> ( employee.birthday == null || employee.birthday.before(new 
> java.util.Date()))

I assume this is an expression in the XML file? Could you post the
whole XML definition (or at least the section)?

> When it comes to instantiate the Date object the call fails in 
> SecurityMemberAccess. isAccessible. Form me it seems that a constructor call 
> is not handled here properly.
>
> public boolean isAccessible(Map context, Object target, Member member, 
> String propertyName) {
> LOG.debug("Checking access for [target: {}, member: {}, property: 
> {}]", target, member, propertyName);
>
> final int memberModifiers = member.getModifiers();
> final Class memberClass = member.getDeclaringClass();
> // target can be null in case of accessing static fields, since OGNL 
> 3.2.8
> final Class targetClass = Modifier.isStatic(memberModifiers) ? 
> memberClass : target.getClass();
> if (!memberClass.isAssignableFrom(targetClass)) {
> throw new IllegalArgumentException("Target does not match 
> member!");
> }
>
> When the method is called target is the class object for java.util.Date, 
> member is a representation of public java.util.Date() and propertyName is 
> null.
> memberModifiers evaluates to 1 and memberClass to the class object for 
> java.util.Date.
>
> This causes the if to resolve to false and throwing the exception. I cannot 
> see how anyone could call any constructor at all.
>
> Is this a known issue or am I overseeing something?

This logic has improved a lot in newer versions of Struts, I would
suggest starting thinking about migration. You can always implement
your own SecurityAccessMember.


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

I finally managed to figure out what was wrong and now the very first
PR is ready
https://github.com/apache/struts-intellij-plugin/pull/1

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Unable to open uploaded pdf and docx file

[Lukasz Lenart]

śr., 27 mar 2024 o 02:01 Mahabir Gupta  napisał(a):
>
> Dear Lukasz,
>
> Uploaded files are ok (access them on the server side once they have been
> uploaded). The MD5 for the uploaded file to the server and the downloaded
> file from the server is different. There is a decrease in the number of kb
> when the file is downloaded. The MD5 changed when it passed through the
> following code.
>
> ServletOutputStream out = null;
> FileInputStream fi = null;
> try {
> out = response.getOutputStream();
> fi = new FileInputStream(f);
> byte[] buffer = new byte[(int)f.length]; // Set the buffer size to
> 4KB or any suitable size
>
> int bytesRead;
> while ((bytesRead = fi.read(buffer)) != -1) {
> out.write(buffer, 0, bytesRead);
> }
> } catch (FileNotFoundException e) {
> e.printStackTrace();
> logger.info("File not found error" + filename);
> logger.error(e.getMessage());
> } catch (IOException e) {
> logger.info("Error in reading file:" + filename);
> } finally {
> if (out != null) safeClose(out);
> if (fi != null) safeClose(fi);
> }

This code isn't related to Struts and as far I see you are missing
.flush() operation
https://github.com/apache/struts/blob/master/core/src/main/java/org/apache/struts2/result/StreamResult.java#L282


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Unable to open uploaded pdf and docx file

[Lukasz Lenart]

I have no idea what can be wrong here. You are using your custom
download mechanism instead of using Stream result [1] which isn't
related to Struts itself. I would double check if uploaded files are
ok (access them on the server side once they have been uploaded).

[1] https://struts.apache.org/core-developers/stream-result.html

pon., 25 mar 2024 o 02:17 Mahabir Gupta  napisał(a):
>
> Dear Lukasz,
>
> Any advice will be greatly appreciated.
> Thank you.
>
> Regards
> Mahabir
>
> On Thu, Mar 14, 2024 at 5:03 PM Mahabir Gupta  wrote:
>
> > Dear Lukasz,
> >
> > This issue came after I upgraded from Struts 2.5 to Struts 6.0.3.2. The
> > .pdf and .docx files seem to be corrupted when I am trying to download the
> > files. Kindly advise. Thank you.
> >
> > Regards
> > Mahabir
> >
> > On Thu, Mar 14, 2024 at 1:38 PM Mahabir Gupta 
> > wrote:
> >
> >> Dear Lukasz,
> >>
> >> I am able to upload and download and open .txt file but for .pdf and
> >> .docx files, I am able to upload but when I download the pdf file, the file
> >> cannot be opened. For the .docx file when I try to click on the file, on
> >> the console it does show the log successfully download attachment file but
> >> on the frontend an error "System is unable to proceed with your request."
> >> is being displayed.
> >>
> >> public class getDotsMissionAction {
> >>
> >> public void downloadAttach(){
> >> try {
> >> String filename = 
> >> DotsFormUtil.cleanStringFile(request.getParameter("filename"));t
> >> String realname = 
> >> DotsFormUtil.cleanStringFile(request.getParameter("name"));
> >>
> >> HttpSession session = (HttpSession) request.getSession();
> >> String strDotsIdToken = (String) 
> >> session.getAttribute("strDotsIdToken");
> >>
> >> try{
> >> if(strDotsIdToken == null || 
> >> !strDotsIdToken.equals(filename.split("_")[0]))
> >> logger.error("strDotsIdToken is null or strDotsIdToken 
> >> is not equal and Exception is thrown");
> >> }catch (Exception e){
> >> logger.info(e);
> >> }
> >> try {
> >> if(filename!= null){
> >> try {
> >> ResourceBundle bundle = 
> >> ResourceBundle.getBundle("resources.dotsDisplay");
> >> String 
> >> strDirectory=DotsFormUtil.cleanpString(bundle.getString("dots.attachments.path"));
> >> File f= new 
> >> File(FilenameUtils.normalize(DotsFormUtil.cleanString(strDirectory+File.separator
> >>  + filename)));
> >> String pattern = 
> >> "[a-zA-Z0-9]{1,50}\\.[a-zA-Z0-9]{1,10}";
> >> if(realname.matches(pattern)){
> >> response.reset();
> >> response.setCharacterEncoding("UTF-8");
> >> response.setContentType("application/pdf");
> >> 
> >> response.setContentType("application/vnd.openxmlformats-officedocument.wordprocessingml.document");
> >> 
> >> response.setHeader("Content-Disposition","attachment; fileName=" 
> >> +realname);
> >> }
> >> try (
> >> OutputStream out2 = 
> >> response.getOutputStream()){
> >> Files.copy(f,out2);
> >> out2.flush();
> >> }
> >> } catch (FileNotFoundException e){
> >> e.printStackTrace();
> >> logger.error(e.getMessage());
> >> }
> >> }
> >> }catch (FileNotFoundException e){
> >> e.printStackTrace();
> >> logger.error(e.getMessage());
> >> }
> >> logger.info("successfully download attachment file");
> >> }catch (FileNotFoundException e){
> >> e.printStackTrace();
> >> logger.error(e.getMessage());
> >> }
> >> }
> >>
> >> public static String cleanStringFile(String- aString){
> >> if(aString==null) return null;
> >> String cleanString = "";
> >> char cleanChar = '\0';
> >> for(int i=0; i >> cleanChar = cleanCharFile(aString.charAt(i));
> >> if(cleanChar != '\0') cleanString+=cleanChar;
> >> }
> >> return cleanString;
> >> }
> >>
> >> private static char cleanCharFile(char aChar){
> >> for(int i = 48; i<58; ++i){
> >> if(aChar ==i) return (char) i;
> >> }
> >> for(int i = 65; i<91; ++i){
> >> if(aChar ==i) return (char) i;
> >> }
> >> for(int i = 97; i<123; ++i){
> >> if(aChar ==i) return (char) i;
> >> }
> >>
> >> switch (aChar){
> >> case '.':
> >> 

Re: struts 2.5.33 - ERROR DefaultClassFinder - Unable to read class - IncompatibleClassChangeError

[Lukasz Lenart]

382]
> at
> org.apache.catalina.startup.HostConfig.deployWARs(HostConfig.java:824)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.startup.HostConfig.start(HostConfig.java:1617)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:318)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:893)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:795)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1328)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1318)
> [catalina.jar:9.0.76]
> at java.util.concurrent.FutureTask.run(FutureTask.java:266)
> [?:1.8.0_382]
> at
> org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
> [tomcat-util.jar:9.0.76]
> at
> java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:134)
> [?:1.8.0_382]
> at
> org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:866)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:249)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.StandardService.startInternal(StandardService.java:428)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:923)
> [catalina.jar:9.0.76]
> at
> org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
> [catalina.jar:9.0.76]
> at org.apache.catalina.startup.Catalina.start(Catalina.java:772)
> [catalina.jar:9.0.76]
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> ~[?:1.8.0_382]
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> ~[?:1.8.0_382]
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> ~[?:1.8.0_382]
> at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_382]
> at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:347)
> [bootstrap.jar:9.0.76]
> at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:478)
> [bootstrap.jar:9.0.76]
>
>
>
> El mié, 20 mar 2024 a las 18:20, Lukasz Lenart ()
> escribió:
>
> > śr., 20 mar 2024 o 01:34 DAngel  napisał(a):
> > > ERROR org.apache.struts2.convention.DefaultClassFinder - Unable to read
> > > class [ mi.action.class]
> > > java.lang.IncompatibleClassChangeError: class
> > > org.apache.struts2.convention.DefaultClassFinder$InfoBuildingVisitor has
> > > interface org.objectweb.asm.ClassVisitor as super class
> >
> > Could you post the whole stack trace?
> >
> > > java 1.8
> > > tomcat 9.0.76
> > > Linux Red Hat 8 (and Ubuntu 16.04)
> > >
> > > struts2-core, struts2-json-plugin, struts2-tiles-plugin,
> > > struts2-convention-plugin [struts.version - 2.5.33]
> > >
> > > *asm, asm-commons, asm-tree*
> > > I have tried both the version: 7.3.1 and 9.6 with the same error result
> >
> > 9.6 requires JDK8 which should be fine, did you try to clean up TEMPs?
> >
> > >   Has anyone had this error?
> > >   Any advice to solve this error is welcome.
> >
> > I assume you do not use Maven, what OGNL version do you use?
> >
> >
> > Cheers
> > Lukasz
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> > For additional commands, e-mail: user-h...@struts.apache.org
> >
> >

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Radio Buttons issue in 6.3.x

[Lukasz Lenart]

śr., 20 mar 2024 o 19:45 Nordmeyer, William, E (Serco NA)
 napisał(a):
>
> I remember reading a few months back about an issue with radio buttons in 
> Struts 6.3 and that the issue was going to be resolved in 6.4.
>
> 2 questions -
>   1.  is there a bug entry that I can reference and monitor?

I assume these two:
https://issues.apache.org/jira/browse/WW-5192
https://issues.apache.org/jira/browse/WW-5365

>   2.  Is there a timeline for when 6.4 will be released?

I would like to release it ASAP, yet there are still two issues I
would like  to address:
https://issues.apache.org/jira/browse/WW-5402
https://issues.apache.org/jira/browse/WW-5400

Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: struts 2.5.33 - ERROR DefaultClassFinder - Unable to read class - IncompatibleClassChangeError

[Lukasz Lenart]

śr., 20 mar 2024 o 01:34 DAngel  napisał(a):
> ERROR org.apache.struts2.convention.DefaultClassFinder - Unable to read
> class [ mi.action.class]
> java.lang.IncompatibleClassChangeError: class
> org.apache.struts2.convention.DefaultClassFinder$InfoBuildingVisitor has
> interface org.objectweb.asm.ClassVisitor as super class

Could you post the whole stack trace?

> java 1.8
> tomcat 9.0.76
> Linux Red Hat 8 (and Ubuntu 16.04)
>
> struts2-core, struts2-json-plugin, struts2-tiles-plugin,
> struts2-convention-plugin [struts.version - 2.5.33]
>
> *asm, asm-commons, asm-tree*
> I have tried both the version: 7.3.1 and 9.6 with the same error result

9.6 requires JDK8 which should be fine, did you try to clean up TEMPs?

>   Has anyone had this error?
>   Any advice to solve this error is welcome.

I assume you do not use Maven, what OGNL version do you use?


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Radio button selection is not being saved on the front end

[Lukasz Lenart]

You can test 6.4.0-SNAPSHOT and confirm if this fixes the problem.
https://nightlies.apache.org/struts/snapshot/
https://struts.apache.org/builds.html#maven-snapshots


pon., 11 mar 2024 o 10:52 Mahabir Gupta  napisał(a):
>
> Dear Lukasz,
>
> My apologies yes I meant Struts 2.5 So this means I have to wait for Struts 
> 6.4 before the radio button will be able to display on the frontend?
> Kindly confirm. Thank you.
>
> Regards
> Mahabir
>
> On Mon, Mar 11, 2024 at 5:29 PM Lukasz Lenart  wrote:
>>
>> I assume you meant Struts 2.5 and I assume you have followed the migration 
>> guide
>> https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration
>>
>> And this can be related to what Nate is suggesting
>>
>> pon., 11 mar 2024 o 09:29 Mahabir Gupta  napisał(a):
>> >
>> > Dear Lukasz,
>> >
>> > I upgraded from Struts 2-6 to struts 6.3.0.2.
>> > Thank you.
>> >
>> > Regards
>> > Mahabir
>> >
>> > On Mon, Mar 11, 2024 at 4:05 PM Nate Kerkhofs  
>> > wrote:
>> >>
>> >> Łukasz,
>> >>
>> >> I think this might be related to the issue I reported in November last 
>> >> year which will be fixed in Struts 6.4 
>> >> (https://issues.apache.org/jira/browse/WW-5365). While it's not a Boolean 
>> >> radio button, it does sound like this is because the value is being 
>> >> processed as a string literal and not as an Ognl expression.
>> >>
>> >> Cheers,
>> >>
>> >> Nate
>> >>
>> >> -Original Message-
>> >> From: Lukasz Lenart 
>> >> Sent: Monday, 11 March 2024 07:23
>> >> To: Struts Users Mailing List 
>> >> Subject: Re: Radio button selection is not being saved on the front end
>> >>
>> >> pon., 11 mar 2024 o 04:54 Mahabir Gupta  napisał(a):
>> >> > The radio button is working perfectly when using Struts2. I only did an 
>> >> > upgrade the Struts6.3.0.2 without making any changes to the code. When 
>> >> > using Struts6.3.0.2 the radio button issue arises. There is no change 
>> >> > of code made.
>> >>
>> >> Could you provide more information from which version you have migrated 
>> >> as there is no such data in your first message?
>> >>
>> >>
>> >> Cheers
>> >> Łukasz
>> >>
>> >> -
>> >> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> >> For additional commands, e-mail: user-h...@struts.apache.org
>> >>
>>
>>
>> --
>> Łukasz
>> mobile +48 606 323 122 http://www.lenart.org.pl/
>>
>> -
>> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> For additional commands, e-mail: user-h...@struts.apache.org
>>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Radio button selection is not being saved on the front end

[Lukasz Lenart]

I assume you meant Struts 2.5 and I assume you have followed the migration guide
https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration

And this can be related to what Nate is suggesting

pon., 11 mar 2024 o 09:29 Mahabir Gupta  napisał(a):
>
> Dear Lukasz,
>
> I upgraded from Struts 2-6 to struts 6.3.0.2.
> Thank you.
>
> Regards
> Mahabir
>
> On Mon, Mar 11, 2024 at 4:05 PM Nate Kerkhofs  wrote:
>>
>> Łukasz,
>>
>> I think this might be related to the issue I reported in November last year 
>> which will be fixed in Struts 6.4 
>> (https://issues.apache.org/jira/browse/WW-5365). While it's not a Boolean 
>> radio button, it does sound like this is because the value is being 
>> processed as a string literal and not as an Ognl expression.
>>
>> Cheers,
>>
>> Nate
>>
>> -Original Message-
>> From: Lukasz Lenart 
>> Sent: Monday, 11 March 2024 07:23
>> To: Struts Users Mailing List 
>> Subject: Re: Radio button selection is not being saved on the front end
>>
>> pon., 11 mar 2024 o 04:54 Mahabir Gupta  napisał(a):
>> > The radio button is working perfectly when using Struts2. I only did an 
>> > upgrade the Struts6.3.0.2 without making any changes to the code. When 
>> > using Struts6.3.0.2 the radio button issue arises. There is no change of 
>> > code made.
>>
>> Could you provide more information from which version you have migrated as 
>> there is no such data in your first message?
>>
>>
>> Cheers
>> Łukasz
>>
>> -
>> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
>> For additional commands, e-mail: user-h...@struts.apache.org
>>


-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

I started working on IP Clearance procedure and prepared a simple GH
Actions workflow (among other things), yet some tests are failing and
I wonder if this can be related to my changes
https://github.com/apache/struts-intellij-plugin/pull/1

Running locally I get:

[   1623]   WARN - #c.i.o.v.n.p.l.VfsLog - VFS Log version differs
from the implementation version: log null vs implementation -43
[   1988]   WARN - #c.i.u.n.s.ConfirmingTrustManager - Received an
empty list of custom trusted root certificates from the system. Check
log above for possible errors, enable debug logging in category
'org.jetbrains.nativecerts' for more information
9:34:54 AM: failed on iteration 1 (use
`recheckingIteration(3201180346085451506L, 1)` or
`withSeed(3201180346085451506L)` to reproduce), shrinking...

09:34:54,050 SEVERE #TestFramework - Test failed
org.jetbrains.jetCheck.PropertyFalsified: Failed with
org.jetbrains.jetCheck.CannotSatisfyCondition: Cannot satisfy
condition can find a file under
/Users/lukaszlenart/.gradle/caches/modules-2/files-2.1/com.jetbrains.intellij.idea/ideaIU/2023.1.1/e45081dc718ef8d79831d3bf759d70fd0dc451c1/ideaIU-2023.1.1/contrib/struts2/ognl/testData/
satisfying given filters
On commands:

The failure is not reproducible on re-run!!! Possible cause: side
effects in the test.

To re-run the minimal failing case, run
  PropertyChecker.customized().rechecking("0ILnxgXym5XmDQE=")
.checkScenarios(...)
To re-run the test with all intermediate shrinking steps, use
`recheckingIteration(3201180346085451506L, 1)` instead for last
iteration, or `withSeed(3201180346085451506L)` for all iterations

 Property failure reason:
org.jetbrains.jetCheck.CannotSatisfyCondition: Cannot satisfy
condition can find a file under
/Users/lukaszlenart/.gradle/caches/modules-2/files-2.1/com.jetbrains.intellij.idea/ideaIU/2023.1.1/e45081dc718ef8d79831d3bf759d70fd0dc451c1/ideaIU-2023.1.1/contrib/struts2/ognl/testData/
satisfying given filters
at 
org.jetbrains.jetCheck.GenerativeDataStructure.generateConditional(GenerativeDataStructure.java:68)
at org.jetbrains.jetCheck.Generator.lambda$suchThat$3(Generator.java:101)
at 
org.jetbrains.jetCheck.GenerativeDataStructure$CurrentData.generateOn(GenerativeDataStructure.java:86)
at 
org.jetbrains.jetCheck.GenerativeDataStructure.generateNonShrinkable(GenerativeDataStructure.java:52)
at org.jetbrains.jetCheck.Generator.lambda$noShrink$2(Generator.java:83)
at 
org.jetbrains.jetCheck.GenerativeDataStructure$CurrentData.generateOn(GenerativeDataStructure.java:86)
at 
org.jetbrains.jetCheck.GenerativeDataStructure.generate(GenerativeDataStructure.java:40)
at org.jetbrains.jetCheck.Scenario.safeGenerate(Scenario.java:102)
at org.jetbrains.jetCheck.Scenario.access$200(Scenario.java:14)
at org.jetbrains.jetCheck.Scenario$1.generateValue(Scenario.java:61)
at 
com.intellij.testFramework.propertyBased.MadTestingUtil.lambda$performOnFileContents$19(MadTestingUtil.java:284)
at 
com.intellij.testFramework.RunAll$Companion$actionSequence$1$1.invoke(RunAll.kt:70)
at 
com.intellij.testFramework.RunAll$Companion$actionSequence$1$1.invoke(RunAll.kt:70)
at com.intellij.testFramework.common.RunAllKt.runAllCatching(runAll.kt:61)
at com.intellij.testFramework.common.RunAllKt.runAll(runAll.kt:32)
at com.intellij.testFramework.RunAll.run(RunAll.kt:21)
at 
com.intellij.testFramework.propertyBased.MadTestingUtil.lambda$performOnFileContents$24(MadTestingUtil.java:301)
at org.jetbrains.jetCheck.Scenario.performCommand(Scenario.java:43)
at org.jetbrains.jetCheck.Scenario.(Scenario.java:23)
at org.jetbrains.jetCheck.Scenario.lambda$scenarios$0(Scenario.java:138)
at org.jetbrains.jetCheck.Iteration.findCounterExample(Iteration.java:61)
at org.jetbrains.jetCheck.Iteration.performIteration(Iteration.java:118)
at org.jetbrains.jetCheck.CheckSession.run(Iteration.java:166)
at 
org.jetbrains.jetCheck.PropertyChecker$Parameters.checkScenarios(PropertyChecker.java:200)
at 
org.jetbrains.jetCheck.PropertyChecker.checkScenarios(PropertyChecker.java:31)
at 
com.intellij.lang.ognl.OgnlCodeInsightSanityTest.testIncrementalHighlighterUpdate(OgnlCodeInsightSanityTest.java:76)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
at 
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:568)
at junit.framework.TestCase.runTest(TestCase.java:177)
at 
com.intellij.testFramework.UsefulTestCase.lambda$runBare$11(UsefulTestCase.java:477)
at 
com.intellij.testFramework.UsefulTestCase.lambda$wrapTestRunnable$13(UsefulTestCase.java:498)
at 
com.intellij.testFramework.UsefulTestCase.runTestRunnable(UsefulTestCase.java:402)
at 
com.intellij.testFramework.UsefulTestCase.defaultRunBare(UsefulTestCase.java:418)
at 

Re: Radio button selection is not being saved on the front end

[Lukasz Lenart]

pon., 11 mar 2024 o 04:54 Mahabir Gupta  napisał(a):
> The radio button is working perfectly when using Struts2. I only did an 
> upgrade the Struts6.3.0.2 without making any changes to the code. When using 
> Struts6.3.0.2 the radio button issue arises. There is no change of code made.

Could you provide more information from which version you have
migrated as there is no such data in your first message?


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Radio button selection is not being saved on the front end

[Lukasz Lenart]

śr., 6 mar 2024 o 08:08 Mahabir Gupta  napisał(a):
> DotsCarRental dotsCarRental = new DotsCarRental();
> dotsCarRental = (DotsCarRental) 
> session.getAttribute(DBConstants.sessionCarId);

You don't have to create an instance if in the next line you assign a
value from session, this is enough:

DotsCarRental dotsCarRental = (DotsCarRental)
session.getAttribute(DBConstants.sessionCarId);

> request.setAttribute("dotsCarRentalForm",frm);
>  listKey="lookupTitle" listValue="lookupTitle" />

You assign the form to the "dotsCarRentalForm" request attribute but
in the value attribute you call "#frm.rentalReason" - maybe this is
the problem.


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: The absolute uri: [http://tiles.apache.org/tags-tiles] cannot be resolved

[Lukasz Lenart]

Does it mean everything is ok?

śr., 6 mar 2024 o 09:13 SARAVANAN SIVAGURU
 napisał(a):

> Hi Luk
>
> It was working fine now; I was customizing the code to do add some extra
> logs for debugging . At that time I missed the tld folder which was
> available as a part of the source code which caused the problem.
>
> Thanks and Regards,
> Saravanan.S
> FTMS/NFT APP-DEV Team
> Mob:- +91 9715644123.
> This e-mail may contain confidential information. If you have received
> this e-mail in error, please notify the sender and then immediately delete
> it from your system. This email and the contents of an attachment to this
> e-mail may contain software viruses which could damage your own computer
> system. Although Nielsen has taken reasonable precautions to minimize this
> risk, it cannot accept liability for any damage you may sustain as a result
> of software viruses
> --
> *From:* Lukasz Lenart 
> *Sent:* Saturday, March 2, 2024 2:55 PM
> *To:* Struts Users Mailing List 
> *Subject:* Re: The absolute uri: [http://tiles.apache.org/tags-tiles]
> cannot be resolved
>
> [You don't often get email from lukaszlen...@apache.org. Learn why this
> is important at https://aka.ms/LearnAboutSenderIdentification ]
>
> CAUTION: This email originated from outside of the organization. Do not
> click links or open attachments unless you recognize the sender and know
> the content is safe.
>
>
> Do you run it from within Eclipse? Is it related to this bug?
>
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugs.eclipse.org%2Fbugs%2Fshow_bug.cgi%3Fid%3D493277=05%7C02%7CSARAVANAN.SIVAGURU%40nielseniq.com%7Ca5f00fd3a5db4eb6e13608dc3a9b1548%7C6ac7a1f45fb14153bb4f12d2020a1f7d%7C0%7C0%7C638449684974577968%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C=WrSCgoDNpbRgUte9ccgOSzzzCjFdyFdga9JZ8%2FGXuqM%3D=0
> <https://bugs.eclipse.org/bugs/show_bug.cgi?id=493277>
>
> I just tested the example tiles app on Jetty and everything was ok
>
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fapache%2Fstruts-examples%2Ftree%2Fmaster%2Ftiles=05%7C02%7CSARAVANAN.SIVAGURU%40nielseniq.com%7Ca5f00fd3a5db4eb6e13608dc3a9b1548%7C6ac7a1f45fb14153bb4f12d2020a1f7d%7C0%7C0%7C638449684974587840%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C=95%2Fvboy%2FlrLqV9AY72OddfjEOruH9eUN77LptzUPKzk%3D=0
> <https://github.com/apache/struts-examples/tree/master/tiles>
>
> czw., 29 lut 2024 o 10:40 SARAVANAN SIVAGURU
>  napisał(a):
> >
> > Any help on my below query would be really appreciated.
> > Thanks in advance.
> >
> > Regards,
> > Saravanan.S
>

Re: Struts 6.3 Issue Uploading Files

[Lukasz Lenart]

Can you take a look at this PR? Can you test it?
https://github.com/apache/struts/pull/892

śr., 6 mar 2024 o 07:51 Lukasz Lenart  napisał(a):
>
> pon., 4 mar 2024 o 00:28 Zoran Avtarovski  
> napisał(a):
> > I tried to raise a ticket to include some logging in the isMultipartRequest 
> > function to record why it failed but I don't have an account anymore.
>
> I've created the ticket
> https://issues.apache.org/jira/browse/WW-5401
>
>
> Cheers
> Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts 6.3 Issue Uploading Files

[Lukasz Lenart]

pon., 4 mar 2024 o 00:28 Zoran Avtarovski  napisał(a):
> I tried to raise a ticket to include some logging in the isMultipartRequest 
> function to record why it failed but I don't have an account anymore.

I've created the ticket
https://issues.apache.org/jira/browse/WW-5401


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: The absolute uri: [http://tiles.apache.org/tags-tiles] cannot be resolved

[Lukasz Lenart]

Please create a new thread instead of mixing in into totally different
discussion

czw., 29 lut 2024 o 01:53 Mahabir Gupta  napisał(a):
>
> Hi I am doing a struts2 upgrade to struts 6.3.0.2. When I am uploading a
> file I am getting java.lang.noclassdeffounderror: could not initialise
> class org.apache.poi.ooxml.poixmltypeloader. I am using poi-5.2.5,
> poi-ooxml-5.2.5 and poi-ooxml-lite-5.2.5 jar files.
> Please advise. Thank you.
>
> Regards
> Mahabir
>
> On Tue, Feb 27, 2024 at 11:13 PM SARAVANAN SIVAGURU
>  wrote:
>
> > As the attachment doesn't pop up am reattaching the files in a zip folder.
> >
> > Thanks and Regards,
> > Saravanan.S
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> > For additional commands, e-mail: user-h...@struts.apache.org
> >

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: The absolute uri: [http://tiles.apache.org/tags-tiles] cannot be resolved

[Lukasz Lenart]

Do you run it from within Eclipse? Is it related to this bug?
https://bugs.eclipse.org/bugs/show_bug.cgi?id=493277

I just tested the example tiles app on Jetty and everything was ok
https://github.com/apache/struts-examples/tree/master/tiles

czw., 29 lut 2024 o 10:40 SARAVANAN SIVAGURU
 napisał(a):
>
> Any help on my below query would be really appreciated.
> Thanks in advance.
>
> Regards,
> Saravanan.S
> 
> From: SARAVANAN SIVAGURU 
> Sent: Tuesday, February 27, 2024 8:39 PM
> To: user@struts.apache.org 
> Subject: Re: The absolute uri: [http://tiles.apache.org/tags-tiles] cannot be 
> resolved
>
> You don't often get email from saravanan.sivag...@nielseniq.com.invalid. 
> Learn why this is important
>
> CAUTION: This email originated from outside of the organization. Do not click 
> links or open attachments unless you recognize the sender and know the 
> content is safe.
>
>
> As the attachment doesn't pop up am reattaching the files in a zip folder.
>
> Thanks and Regards,
> Saravanan.S

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts 6.3 Issue Uploading Files

[Lukasz Lenart]

The request must match the following regex [1], more details in the
docs [2], yet I notice there is no logging around this logic, feel
free to create a ticket to improve that.

[1] 
https://github.com/apache/struts/blob/master/core/src/main/java/org/apache/struts2/dispatcher/Dispatcher.java#L110
[2] 
https://struts.apache.org/core-developers/file-upload.html#request-validation

śr., 28 lut 2024 o 23:28 Zoran Avtarovski  napisał(a):
>
> Hi Guys,
>
>
>
> We are unable to upload files to our first 6.3 application using HTTP 
> requests, but the strange thing is they work with ajax requests. I suspect we 
> are overlooking something in the config which is required in 6.3.
>
>
>
> We are using 6.3.0.2 running on Tomcat 9. The file object is null after the 
> upload but we can see the upload is there.
>
>
>
> I can see the params interceptor finds the file and copies it to the temp 
> directory, but I then can’t access the file in the action??? What’s really 
> strange is if we use the same mechanism using a an ajax request with FormData 
> it works as expected. That’s why we created a simple setup as outlined below 
> to identify the root cause.
>
>
>
> Any help would really be appreciated.
>
>
>
> Here’s a snippet of the logs:
>
> multipart.JakartaMultiPartRequest (JakartaMultiPartRequest.java:103) - Found 
> file item: [upload]
>
> multipart.JakartaMultiPartRequest (JakartaMultiPartRequest.java:114) - Item 
> is a file upload
>
>
>
> When I try and access the file in my action:
>
> action.IndexAction (IndexAction.java:54) - Uploaded file : null
>
> action.IndexAction (IndexAction.java:55) - Uploaded file name : null
>
> action.IndexAction (IndexAction.java:56) - Uploaded file type : null
>
> action.IndexAction (IndexAction.java:57) - Uploaded file length  : 0
>
>
>
>
>
> And then after the request has completed:
>
> multipart.JakartaMultiPartRequest (JakartaMultiPartRequest.java:361) - 
> Removing file upload name=Invoice - 1331-1.pdf, StoreLocation= 
> /apache-tomcat-9.0.44_base/work/Catalina/localhost/caams/upload_0569c990_d32c_4688_ad50_44db275ab0cc_.tmp,
>  size=465396 bytes, isFormField=false, FieldName=upload
>
>
>
> This is what my form looks like:
>
>
>
>  theme="simple">
>
> 
>
>   Submit
>
> 
>
>
>
> My action has the following (BaseAction extends ActionSupport):
>
>
>
> public class IndexAction extends BaseAction {
>
>
>
> private File upload;
>
> private String uploadFileName;
>
> private String uploadContentType;
>
> private long uploadContentLength;
>
>
>
> public IndexAction() {
>
> }
>
>
>
> @Override
>
> public String execute() {
>
> return SUCCESS;
>
> }
>
>
>
> public String edit() {
>
> return INPUT;
>
> }
>
>
>
> public String uploadTest() {
>
> try {
>
> LOGGER.debug("Uploaded file : "+ upload);
>
> LOGGER.debug("Uploaded file name : "+ uploadFileName);
>
> LOGGER.debug("Uploaded file type : "+ uploadContentType);
>
> LOGGER.debug("Uploaded file length  : "+ uploadContentLength);
>
>
>
> inputStream = new FileInputStream(upload);
>
>
>
> if (inputStream != null) {
>
> inputStream.close();
>
> }
>
>
>
> } catch (Exception e) {
>
> LOGGER.error("General . uploading error :", e);
>
> }
>
>
>
> return SUCCESS;
>
> }
>
>
>
> public File getUpload() {
>
> return upload;
>
> }
>
>
>
> public void setUpload(File upload) {
>
> this.upload = upload;
>
> }
>
>
>
> public String getUploadFileName() {
>
> return uploadFileName;
>
> }
>
>
>
> public void setUploadFileName(String uploadFileName) {
>
> this.uploadFileName = uploadFileName;
>
> }
>
>
>
> public String getUploadContentType() {
>
> return uploadContentType;
>
> }
>
>
>
> public void setUploadContentType(String uploadContentType) {
>
> this.uploadContentType = uploadContentType;
>
> }
>
>
>
> public long getUploadContentLength() {
>
> return uploadContentLength;
>
> }
>
>
>
> public void setUploadContentLength(long uploadContentLength) {
>
> this.uploadContentLength = uploadContentLength;
>
> }
>
> }
>
>
>
> My relevant struts.xml config:
>
>
>
> 
>
> 
>
> 
>
> 
>
> 
>
> 
>
>
>
> 
>
> 
>
>
>
> 
>
> 
>
> 
>
>
>
> 
>
> 
>
>
>
> 
>
> /WEB-INF/pages/main/formUpload.jsp
>
> home
>
> 
>
>
>
> 
>
> /WEB-INF/pages/main/formUpload.jsp
>
> 
>
>
>
> 
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

Finally all is set, the code has been donated & imported and also the
plugin has been transferred under ASF org
https://plugins.jetbrains.com/organizations/apache

Time to get familiar with the code base :D

Cheers
Lukasz

wt., 6 lut 2024 o 10:24 Lukasz Lenart  napisał(a):
>
> Code has been donated to ASF, I created a new repo [1], yet I have to
> import the code [2]
>
> [1] https://github.com/apache/struts-intellij-plugin
> [2] https://github.com/JetBrains/intellij-obsolete-plugins/tree/master/struts2
>
>
> Cheers
> Lukasz
>
> sob., 30 gru 2023 o 10:57 Lukasz Lenart  napisał(a):
> >
> > pt., 22 gru 2023 o 14:49 Burton Rhodes  napisał(a):
> > >
> > > Lukasz,
> > > It appears the Struts 2 Intellij Plugin needs to be updated after
> > > upgrading to Intellij 2023.3.  I am happy to help bump the version
> > > numbers, but I'm not sure where the Struts repository is for this
> > > plugin.  I know you were going to create one after I upgraded the last
> > > version.  Can you point me in the right direction so I can create a PR?
> >
> > Thanks Burton for bringing this to my attention as I totally forgot
> > about this. I requested donation of the plugin code to ASF but I
> > didn't get a positive response yet, I will ping them again :)
> >
> >
> > Cheers
> > Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts Java 17 and J2EE9 support

[Lukasz Lenart]

wt., 20 lut 2024 o 15:29 Nate Kerkhofs  napisał(a):
> Is there a specific launch window Apache is targeting for the launch of 
> Struts 7 and the associated migration guide?

Nope, yet I want to release Struts 6.4.0 and then probably start
working on releasing Struts 7. This is also related to EOF of Struts
2.5.x in two months, which means you can expect Struts 7 once Struts
2.5.x is EOF

Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts Java 17 and J2EE9 support

[Lukasz Lenart]

Nope, support for JDK17 & JakartaEE is planned in Struts 7
https://github.com/apache/struts/pull/792

You can test the latest M2 release
https://lists.apache.org/thread/9gs0gjljzk72rk22fx64mvpf6dt72lpq

Cheers
Lukasz

pon., 19 lut 2024 o 17:31 Ankit Garg  napisał(a):
>
>  TCS Confidential
>
> Hi All,
>
> May I check if Struts 6.x supports Java 17 with J2EE 9 specification?
> I know - The 6.x series of the Apache Struts framework has a minimum 
> requirement of the following specification versions: Servlet API 3.1, JSP API 
> 2.1, and Java 8. Should I assume it would work with Java 17 and J2EE 9?
>
> Thank you.
>
> Regards,
> Ankit Garg
>
> -Original Message-
> From: Lukasz Lenart 
> Sent: Thursday, December 7, 2023 1:00 PM
> To: announceme...@struts.apache.org
> Cc: annou...@apache.org
> Subject: [ANN] Apache Struts 6.3.0.2 & 2.5.33
>
> External Email : Be cautious while opening any links or attachments.
>
> The Apache Struts group is pleased to announce that Apache Struts versions 
> 6.3.0.2 & 2.5.33 are available as “General Availability”
> releases. The GA designation is our highest quality grade.
>
> The Apache Struts is an elegant, extensible framework for creating 
> enterprise-ready Java web applications. The framework has been designed to 
> streamline the full development cycle, from building, to deploying, to 
> maintaining applications over time.
>
> This version addresses a potential security vulnerability identified as 
> CVE-2023-50164 and described in S2-066 - please read the mentioned security 
> bulletins for more details. This is a drop-in replacement and upgrade should 
> be straightforward.
> * https://cwiki.apache.org/confluence/display/WW/S2-066
>
> Please read the Version Notes to find more details about performed bug fixes 
> and improvements.
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0.2
> * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.33
>
> All developers are strongly advised to perform this upgrade.
>
> The 6.x series of the Apache Struts framework has a minimum requirement of 
> the following specification versions: Servlet API 3.1, JSP API 2.1, and Java 
> 8.
>
> Should any issues arise with your use of any version of the Struts framework, 
> please post your comments to the user list, and, if appropriate, file a 
> tracking ticket.
> * https://issues.apache.org/jira/projects/WW/
>
> You can download this version from our download page.
> * https://struts.apache.org/download.cgi#struts-ga
>
>
> Regards
> --
> Łukasz
> =-=-=
> Notice: The information contained in this e-mail
> message and/or attachments to it may contain
> confidential or privileged information. If you are
> not the intended recipient, any dissemination, use,
> review, distribution, printing or copying of the
> information contained in this e-mail message
> and/or attachments to it are strictly prohibited. If
> you have received this communication in error,
> please notify us by reply e-mail or telephone and
> immediately and permanently delete the message
> and any attachments. Thank you
>
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Requesting support on struts tiles plugin migration

[Lukasz Lenart]

What is "Screen xxx could not be found in any context"? Is it your custom
code?
I would suggest migrating to standalone Tiles 3 first and then migrate to
the Struts Tiles in Struts 6.x.

pon., 19 lut 2024 o 12:28 SARAVANAN SIVAGURU
 napisał(a):

> Hi Team
>
> I am trying to migrate the Apache Tiles(tiles-core, tiles-jsp and
> tiles-servlet) 2.1.4 to Apache struts2-tiles-plugin 6.3.0.2
> As a part of this migration, I have performed necessary changes on the
> tiles.xml files as per the document.
>
> Currently I have been struck on the following issue,
> When I tried to load the jsp page I got the following error but am not
> sure what and where I did mistake to proceed further.
> Note:- Screen name is the placeholder, it is the name of the screen
> defined in the jsp file
> *JSP Content:*
>
> <%-- Screen Name --%>
>  value="com.acnielsen.ftms.common.portal" />
>
> *Error:*
> exception=javax.servlet.jsp.JspException: Screen
> com.acnielsen.ftms.common.portal could not be found in any context
> javax.servlet.jsp.JspException: Screen com.acnielsen.ftms.common.portal could
> not be found in any context
> at
> org.apache.jsp.org.kawa.template.layout.basicLayout_jsp._jspService(basicLayout_jsp.java:330)
> [ftmsconsole/:?]
> at
> org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
> [jasper.jar:9.0.71]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:779)
> [servlet-api.jar:4.0.FR]
> at
> org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:466)
> [jasper.jar:9.0.71]
> at
> org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:379)
> [jasper.jar:9.0.71]
> at
> org.apache.jasper.servlet.JspServlet.service(JspServlet.java:327)
> [jasper.jar:9.0.71]
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:779)
> [servlet-api.jar:4.0.FR]
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227)
> [catalina.jar:9.0.71]
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)
> [catalina.jar:9.0.71]
> at
> org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:711)
> [catalina.jar:9.0.71]
>
> *Build.gradle:*
>
> api("org.apache.struts:struts2-core:6.3.0.2")
> api('org.apache.struts:struts2-tiles-plugin:6.3.0.2')
>
> Possible to give any suggestions on how to resolve the issue.
>
> Thanks and Regards,
> Saravanan.S
> FTMS/NFT APP-DEV Team
> Mob:- +91 9715644123.
> This e-mail may contain confidential information. If you have received
> this e-mail in error, please notify the sender and then immediately delete
> it from your system. This email and the contents of an attachment to this
> e-mail may contain software viruses which could damage your own computer
> system. Although Nielsen has taken reasonable precautions to minimize this
> risk, it cannot accept liability for any damage you may sustain as a result
> of software viruses
>

Re: allowed-methods tag not working

[Lukasz Lenart]

czw., 8 lut 2024 o 16:39 apacheStrutsUsers8
 napisał(a):
>
> I have a Struts app which I am upgrading from Struts 2.5 to Struts 6. In my 
> struts xml file, I currently have actions which have the allowed-methods tag 
> like this:
>
> 
> /done.jsp
> start, finish, next
> 
>
> However, when I try to call someAction!start.action, the start method is not 
> called and it looks for the execute method instead. The same thing happens 
> for the finish and next methods.
>
> Any guesses why it is not working? Or ideas on how to fix it? The existing 
> code does work correctly in Struts 2.5 and methods without the "{1}" syntax 
> do work (i.e. if there is a specific method="finish").

Did you enable DMI? It's disabled by default
https://github.com/apache/struts/blob/master/core/src/main/resources/org/apache/struts2/default.properties#L115

Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

Code has been donated to ASF, I created a new repo [1], yet I have to
import the code [2]

[1] https://github.com/apache/struts-intellij-plugin
[2] https://github.com/JetBrains/intellij-obsolete-plugins/tree/master/struts2


Cheers
Lukasz

sob., 30 gru 2023 o 10:57 Lukasz Lenart  napisał(a):
>
> pt., 22 gru 2023 o 14:49 Burton Rhodes  napisał(a):
> >
> > Lukasz,
> > It appears the Struts 2 Intellij Plugin needs to be updated after
> > upgrading to Intellij 2023.3.  I am happy to help bump the version
> > numbers, but I'm not sure where the Struts repository is for this
> > plugin.  I know you were going to create one after I upgraded the last
> > version.  Can you point me in the right direction so I can create a PR?
>
> Thanks Burton for bringing this to my attention as I totally forgot
> about this. I requested donation of the plugin code to ASF but I
> didn't get a positive response yet, I will ping them again :)
>
>
> Cheers
> Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Velocity tags Issue after Struts upgrade to 2.5.33

[Lukasz Lenart]

Damn... my fault :(

> I recently upgraded my Struts version from 2.5.22 to 2.5.33

śr., 31 sty 2024 o 16:18 Lukasz Lenart  napisał(a):
>
> śr., 31 sty 2024 o 16:01 Lamia Wertani  napisał(a):
> >  It's unclear why this wasn't necessary in the previous version (2.5.22) 
> > because everything worked fine without it.
>
> So you have migrated from 2.5.22 (not 2.5.32 as in the first message)
> to 2.5.33 then :D
>
>
> Regards
> Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Velocity tags Issue after Struts upgrade to 2.5.33

[Lukasz Lenart]

śr., 31 sty 2024 o 16:01 Lamia Wertani  napisał(a):
>  It's unclear why this wasn't necessary in the previous version (2.5.22) 
> because everything worked fine without it.

So you have migrated from 2.5.22 (not 2.5.32 as in the first message)
to 2.5.33 then :D


Regards
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Velocity tags Issue after Struts upgrade to 2.5.33

[Lukasz Lenart]

wt., 30 sty 2024 o 10:01 Lamia Wertani  napisał(a):
>
> response:  {"messages":["Group Test successfully added"],"result":"success"}
>
> The same response is displayed on a blank page.

But this is JSON so I have no idea how does it relate to Velocity - I
would assume you have a problem with JS on your end


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Velocity tags Issue after Struts upgrade to 2.5.33

[Lukasz Lenart]

wt., 30 sty 2024 o 09:09 Lamia Wertani  napisał(a):
>
> Yes, the save works fine.
>  I have attached a screenshot of the response.

Attachments won't pass, only .txt files are allowed


Regards
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Velocity tags Issue after Struts upgrade to 2.5.33

[Lukasz Lenart]

pon., 29 sty 2024 o 20:11 Lamia Wertani  napisał(a):
>
> I have attached a file containing the generated HTML.

This looks good

> > However, instead of redirecting me to the domains list, it leads to a
> > blank page displaying the result.

If the save works, it means the response from action is broken, what
do you get as the response? Can use some a browser tool to check that?


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Can I get some help with a file upload issue?

[Lukasz Lenart]

It would be better to post the whole  tag example plus you action class

pon., 22 sty 2024 o 22:31 Doolin, Kyle
 napisał(a):
> name="vfcForm.fileNameDel"

"vfcForm" is a field in your action with proper getter, right?
"fileNameDel" is a field in the bean "vfcForm", right? If yes, you
must have the following setters

public void setFileNameDel(File file) - it will be called by the
upload interceptor to pass the uploaded file in

public void setFileNameDelContentType(String contentType) - it will be
called by the upload interceptor to set the content type of the
uploaded file

public void setFileNameDelFileName(String filename) - it will be
called by the upload interceptor to set the original name of the
uploaded file

All this is explained here
https://struts.apache.org/core-developers/file-upload.html#example-action-class


Regards
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts2 Intellij Plugin v2023.3.2

[Lukasz Lenart]

niedz., 14 sty 2024 o 19:16 Burton Rhodes  napisał(a):
>
> If anyone needs a working version of the Intellij Struts 2 Plugin, I
> have updated the plugin to work with latest version of Intellij 2023.3.2
> in my personal fork.
>
> https://github.com/burtonrhodes/intellij-obsolete-plugins/releases/tag/v2023.3.2
>
> This is a temporary stop-gap until Apache officially creates their own
> repository.

Thanks a lot Burton for keeping the plugin up-to-date. We wait on
Jetbrains to officially donate the plugin to ASF - this is in progress
:)


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: [EXTERNAL] Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

Hi Noel,

Could you start a new thread? Messing up with different topics won't help :)

Cheers
Lukasz

pt., 12 sty 2024 o 13:59  napisał(a):
>
> Hi,
>
> Need help.
>
> We use struts 2.5.25 with Tiles 3.
>
> We migrated struts 2.5.25 to struts 6.3.0.2, we hit error, see below, log 
> from websphere app server version 9.0.5.
>
> [1/11/24 12:02:32:792 EST] 00f4 ServletWrappe E 
> com.ibm.ws.webcontainer.servlet.ServletWrapper service SRVE0014E: Uncaught 
> service() exception root cause /cris/template/template.jsp: 
> com.ibm.websphere.servlet.error.ServletErrorReport: 
> java.lang.NoSuchMethodError: 
> org/apache/tiles/template/InsertAttributeModel.executeZLjava/lang/StringLjava/lang/StringLjava/lang/ObjectLjava/lang/StringLjava/lang/StringLjava/lang/StringLorg/apache/tiles/AttributeZLorg/apache/tiles/request/RequestLorg/apache/tiles/autotag/core/runtime/ModelBodyV
>  loaded from 
> file:/C:/Program20Files/ibm/WebSphere/AppServer_1/profiles/AppSrv01/installedApps/weds/BBSear.ear/BBS.ear/BBSWeb.war/WEB-INF/lib/struts2-tiles-plugin-6.3.0.2.jar
>  by
> com.ibm.ws.classloader.CompoundClassLoader@d53dbbf4[war:BBS/BBSWeb.war]
>
> Can you please assist us.
>
> Thanks.
>
>
> Noel Deleon
> CRIS/ICRIS, 201-828-8524
>
>
>
>
>
>
>
>
> -Original Message-
> From: Lukasz Lenart 
> Sent: Friday, January 12, 2024 12:40 AM
> To: Struts Users Mailing List 
> Subject: [EXTERNAL] Re: Trouble with  tag after upgrading from 
> struts v2.5.31 to v6.3.0.2
>
> CAUTION! This email originated outside of the organization. Please do not 
> open attachments or click links from an unknown or suspicious origin.
>
> ==
> czw., 11 sty 2024 o 22:49 Burton Rhodes  napisał(a):
> >
> > If I were to guess they removed the "?no_esc" flag in version 6.x in
> > the .ftl file.  That said, it's easy to override this.  (Assuming you
> > are using the Struts "simple" template) Locate the file
> > [struts2-core-6.3.0.2.jar]\template\simple\radiomap.ftl  and copy it
> > into your resources directory with the same tree:
> > resource\\template\simple\radiomap.ftl
> >
> > Then towards the end of the ftl file you will see the  tag.
> > Just add "?no_esc" to the ${itemValue}.  Like this...
> >
> >  > "/${parameters.templateDir}/${parameters.expandTheme}/css.ftl"/>><#rt/>
> >  ${itemValue?no_esc}<#t/>
> > 
> >
> > They most likely removed it due to security issues, but feel free to
> > change if you feel it's "safe".  I tested the above code and it worked
> > for me.
>
> Thanks Burton for the solution! The issue is rather simple, a new Freemarker 
> version escapes everything automatically, so we had to unescape everything. 
> Yet in this case there was never ?no_esc flag as this worked fine with older 
> versions of Freemarker. Adding ?no_esc shouldn't be a security issue IMHO. 
> Feel free to create a ticket in JIRA to address this problem.
>
> Cheers
> Łukasz
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

czw., 11 sty 2024 o 22:49 Burton Rhodes  napisał(a):
>
> If I were to guess they removed the "?no_esc" flag in version 6.x in the
> .ftl file.  That said, it's easy to override this.  (Assuming you are
> using the Struts "simple" template) Locate the file
> [struts2-core-6.3.0.2.jar]\template\simple\radiomap.ftl  and copy it
> into your resources directory with the same tree:
> resource\\template\simple\radiomap.ftl
>
> Then towards the end of the ftl file you will see the  tag.  Just
> add "?no_esc" to the ${itemValue}.  Like this...
>
>  "/${parameters.templateDir}/${parameters.expandTheme}/css.ftl"/>><#rt/>
>  ${itemValue?no_esc}<#t/>
> 
>
> They most likely removed it due to security issues, but feel free to
> change if you feel it's "safe".  I tested the above code and it worked
> for me.

Thanks Burton for the solution! The issue is rather simple, a new
Freemarker version escapes everything automatically, so we had to
unescape everything. Yet in this case there was never ?no_esc flag as
this worked fine with older versions of Freemarker. Adding ?no_esc
shouldn't be a security issue IMHO. Feel free to create a ticket in
JIRA to address this problem.

Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: CVE-2023-49735 in Apache Tiles

[Lukasz Lenart]

One correction: I missed the word "onwards" which means Tiles 3 is also
affected, yet I assume the report itself is invalid.

Re: CVE-2023-49735 in Apache Tiles

[Lukasz Lenart]

Hi Sebastian,

To be honest I have no idea why this triggers any alert. The
vulnerability targets Tiles 2.0 [1] while Struts (even before merging the
codebase) is using Tiles 3 which shouldn't be affected. This could be an
issue of false positive alert in OWASP. Also the vulnerability report looks
suspicious as it mentions of manipulating the session
attribute DefaultLocaleResolver.LOCALE_KEY by a user - based on the
tiles-test example [2] I can say it's a developer fault not a library
vulnerability, report is invalid IMO.

We can move this discussion to security@struts.a.o to get support from ASF
Security gurus.

[1] https://lists.apache.org/thread/8ktm4vxr6vvc1qsxh6ft8jzmom1zl65p
[2]
https://github.com/apache/tiles/blob/TILES_2_1_X/tiles-test/src/main/java/org/apache/tiles/test/servlet/SelectLocaleServlet.java#L81-L102


Cheers
Łukasz

śr., 10 sty 2024 o 11:08 Sebastian Götz 
napisał(a):

> Hi Lukasz,
>
> happy new year to you and everyone as well!
>
> Unfortunately I had some trouble with the mailing list and thus did not
> receive your reply. I have found it browsing the group by browser and so I
> post your reply here for reference:
>
> Happy New Year!
> The Tiles codebase has been copied into the Struts Tiles plugin [1] and
> it's a part of the Struts 6.3.0 right now. Migrating to this version should
> solve the problem. And we (Struts) are going to maintain the Tiles codebase
> under the plugin, so no worries :) [1]
> https://issues.apache.org/jira/browse/WW-5233 Cheers Łukasz
>
> I am very glad to hear that we do not have to move away from Tiles as it
> is a core of our product. We are running the OWASP dependency checker
> during the build. As we are on Struts 6.3.0.2 already, which shoul dbe the
> most recent version, I am not quite clear what to do now as the checker
> still marks struts-tiles-plugin.jar as vulnerable:
>
> Dependency-Check Failure:
> One or more dependencies were identified with vulnerabilities that have a 
> CVSS score greater than or equal to '7,0':
> struts2-tiles-plugin.jar: CVE-2023-49735
>
> So my question is: can we treat this as a false positive or is the
> vulnerability still there and we need to wait for fix version?
>
> Kind regards
>
> Sebastian
>
>
> Am 02.01.2024 um 09:57 schrieb Sebastian Götz:
>
> Hello to anybody and an happy new year!
>
> Our dependency check startet to fail last year already marking
> struts2-tiles-plugin as the source of a security issue. As the plugin uses
> Apache Tiles 3.0.8 underneath it is affected by CVE-2023-49735.
> Now as we use the struts-tiles-plugin to build our web pages and the Tiles
> project is already retired, can somebody of the team explain how to
> mitigate the security issue (besides moving away from Tiles completely)?
>
> Kind regards
>
> Sebastian
>
>
>
>
> --
>
> Mit freundlichen Grüßen
> iNFORM Technology GmbH
>
> Sebastian Götz
>
> *
>
> iNFORM Technology GmbH
> Berliner Straße 24
> 72458 Albstadt-Ebingen
>
> Tel: +49 7431 9816090
> s.go...@inform-technology.de
> http://www.inform-technology.de/
>
> *
>
> 
>
> Geschäftsführer: Christian Wanner | Handelsregister: HRB 773712,
> Amtsgericht Stuttgart | USt-ID Nr.: DE312290945
>
> Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte
> Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail
> irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und
> vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte
> Weitergabe dieser Mail ist nicht gestattet.
>
> This e-mail may contain confidential and/or privileged information. If you
> are not the intended recipient (or have received this e-mail in error)
> please notify the sender immediately and destroy this e-mail. Any
> unauthorised copying, disclosure or distribution of the material in this
> e-mail is strictly forbidden.
>

Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

wt., 9 sty 2024 o 20:04 Pranish Srigiri  napisał(a):
> I also noticed that 6.4 requires a new dependency called caffein. My server
> wasn't starting until I included this dependency,
> https://central.sonatype.com/artifact/com.github.ben-manes.caffeine/caffeine

Yes, this is something to be addressed as well [1]
[1] https://issues.apache.org/jira/browse/WW-5369


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

wt., 9 sty 2024 o 20:01 Pranish Srigiri  napisał(a):
> Hi Lukasz,
> I'm not sure if the PR is included in the present Snapshot available here.
> https://repository.apache.org/content/groups/snapshots/org/apache/struts/struts2-core/6.4.0-SNAPSHOT/
> I tried to test with this version of the Snapshot but unfortunately the
> issue wasn't resolved, so I guess the PR isn't included in this version of
> the SNAPSHOT.

As I said, the PR got merged into codebase but the SNAPSHOT wasn't
deployed because of [1]
[1] https://issues.apache.org/jira/browse/INFRA-25350


Cheers
Lukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

pon., 8 sty 2024 o 20:21 Pranish Srigiri  napisał(a):
> Hi Lukasz,
> I think the PR could address the problem. I see that the fix-version of
> WW-5365 is 6.4. When do you think v6.4 is going to go 'GA'? Is there a way
> to test this PR?

Version 6.4.0 will be released once this issue is resolved [1] - I
think this is the final piece.

The PR got merged and a SNAPSHOT version should be deployed to ASF
Nexus soon [2]  or you can download it from here [3] (once this ticket
is addressed [4])

[1] https://issues.apache.org/jira/browse/WW-5352
[2] https://struts.apache.org/builds.html#maven-snapshots
[3] https://nightlies.apache.org/struts/snapshot/
[4] https://issues.apache.org/jira/browse/INFRA-25350


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: trouble replacing

[Lukasz Lenart]

czw., 4 sty 2024 o 12:33 Patrice DUROUX
 napisał(a):
> In the concerned webapp project, some JSP have code like:
>
> 
> ...
> var speciesData = ;
> ...
> 
>
> And if I just replace in it 

Re: Trouble with tag after upgrading from struts v2.5.31 to v6.3.0.2

[Lukasz Lenart]

Could this PR [1] address your problem?

[1] https://github.com/apache/struts/pull/835


Regards
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts 6.3 tags do not automatically evaluate the value field against the ognl stack

[Lukasz Lenart]

This PR [1] should fix the problem. There was a gap in our unit tests
which allowed us to introduce the previous change that broke
evaluation of the value attribute.

[1] https://github.com/apache/struts/pull/835


Regards
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: CVE-2023-49735 in Apache Tiles

[Lukasz Lenart]

wt., 2 sty 2024 o 13:34 Sebastian Götz 
napisał(a):
> Hello to anybody and an happy new year!

Happy New Year!

> Our dependency check startet to fail last year already marking
> struts2-tiles-plugin as the source of a security issue. As the plugin
> uses Apache Tiles 3.0.8 underneath it is affected by CVE-2023-49735.
> Now as we use the struts-tiles-plugin to build our web pages and the
> Tiles project is already retired, can somebody of the team explain how
> to mitigate the security issue (besides moving away from Tiles completely)?

The Tiles codebase has been copied into the Struts Tiles plugin [1]
and it's a part of the Struts 6.3.0 right now. Migrating to this
version should solve the problem. And we (Struts) are going to
maintain the Tiles codebase under the plugin, so no worries :)

[1] https://issues.apache.org/jira/browse/WW-5233


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

pt., 22 gru 2023 o 14:49 Burton Rhodes  napisał(a):
>
> Lukasz,
> It appears the Struts 2 Intellij Plugin needs to be updated after
> upgrading to Intellij 2023.3.  I am happy to help bump the version
> numbers, but I'm not sure where the Struts repository is for this
> plugin.  I know you were going to create one after I upgraded the last
> version.  Can you point me in the right direction so I can create a PR?

Thanks Burton for bringing this to my attention as I totally forgot
about this. I requested donation of the plugin code to ASF but I
didn't get a positive response yet, I will ping them again :)


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: New warning message appearing with version 6.3 - SecurityMemberAccess - Access to non-public ... is blocked!

[Lukasz Lenart]

pon., 18 gru 2023 o 19:45 Ralph Grove  napisał(a):
> 

Ok, so you use the bootstrap plugin so this the problem
https://github.com/struts-community-plugins/struts2-bootstrap/pull/109

yet this isn't released yet and we should do it


Regards
-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: New warning message appearing with version 6.3 - SecurityMemberAccess - Access to non-public ... is blocked!

[Lukasz Lenart]

sob., 16 gru 2023 o 19:10 Ralph Grove  napisał(a):
> The setup action declares it this way:
>
> private HashMap statuses;
>
> statuses = User.getStatusMap();
>
>
> And in the User class it’s created in the get method:
>
> public static HashMap getStatusMap() {
> HashMap statusMap = new HashMap<>();
> statusMap.put(User.ACTIVE, "Active");
> statusMap.put(User.INACTIVE, "Inactive");
> return statusMap;
> }

Do you use a custom template? Maybe you have your own radiomap.ftl? I
just tested the Showcase app and didn't notice such problems.
Basically you shouldn't notice such warning as it means someone is
trying to access a protected property of your bean


Cheers
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: New warning message appearing with version 6.3 - SecurityMemberAccess - Access to non-public ... is blocked!

[Lukasz Lenart]

pt., 15 gru 2023 o 16:34 Grove, Ralph - groverf  napisał(a):
>
> After upgrading from Struts 6.1.1 to 6.3.0.2, these messages began appearing 
> in the log, always four at a time:
>
> [WARN ] 2023-12-15 07:33:15 [https-jsse-nio-8443-exec-109] 
> SecurityMemberAccess - Access to non-public [protected java.lang.String 
> org.apache.struts2.components.UIBean.disabled] is blocked!
>
> The problem seems to be related to this radio button tag in a JSP. When I 
> remove it from the JSP, the messages disappear.
>
> 
>
> "statuses" refers to a HashMap that is placed on the ValueStack by a 
> preceding setup action, where it is a private attribute:
>
> private HashMap statuses;
>
> public HashMap getStatuses() { return statuses; }
>
> Can anyone explain why the messages appear, and if it's safe to ignore them?

What values do you have in "statuses"?


Regards
-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Add context to CspInterceptor reportUri

[Lukasz Lenart]

sob., 16 gru 2023 o 17:04 Andreas Sachs  napisał(a):
>
> Hello,
> i'm using the CspInterceptor and want to add a reportUri. The destination is 
> an action defined in my application.
>
> To set the reportUri in struts.xml i have to specify the complete url (with 
> context).
>
> /context/report.action
>
> Is there a parameter to get the context?
>
> //report.action

Good question, I think right now I don't see any other option than
using "CspSettingsAware" interface and setting everything via action.

To have this work during action processing the interceptor must be
marked with "WithLazyParams" [1] - in other case the params are
populated during instating the interceptor
[1] https://struts.apache.org/core-developers/interceptors#lazy-parameters


Regards
-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: FW: [ANN] Apache Struts 6.3.0.2 & 2.5.33

[Lukasz Lenart]

pon., 11 gru 2023 o 16:09 Ankit Garg  napisał(a):
> May I check if Struts 6.x supports Java 17 with J2EE 9 specification?

Java 17 is supported but JakartaEE is a totally different kind of
beast and it will be supported in Struts 7.x - there is a plan to
release a first M1 version soon [1]

[1] https://github.com/apache/struts/pull/778

> I know - The 6.x series of the Apache Struts framework has a minimum 
> requirement of the following specification versions: Servlet API 3.1, JSP API 
> 2.1, and Java 8. Should I assume it would work with Java 17 and J2EE 9?

Struts 6.x won't work on JakaratEE enabled containers, review the
above PR to notice the number of changes


Regards
-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Fwd: [ANN] Apache Struts 6.3.0.2 & 2.5.33

[Lukasz Lenart]

FYI

-- Forwarded message -
Od: Lukasz Lenart 
Date: czw., 7 gru 2023 o 08:30
Subject: [ANN] Apache Struts 6.3.0.2 & 2.5.33
To: 
Cc: 


The Apache Struts group is pleased to announce that Apache Struts
versions 6.3.0.2 & 2.5.33 are available as “General Availability”
releases. The GA designation is our highest quality grade.

The Apache Struts is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework has been
designed to streamline the full development cycle, from building, to
deploying, to maintaining applications over time.

This version addresses a potential security vulnerability identified
as CVE-2023-50164 and described in S2-066 - please read the mentioned
security bulletins for more
details. This is a drop-in replacement and upgrade should be straightforward.
* https://cwiki.apache.org/confluence/display/WW/S2-066

Please read the Version Notes to find more details about performed bug
fixes and improvements.
* https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0.2
* https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.33

All developers are strongly advised to perform this upgrade.

The 6.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 3.1,
JSP API 2.1, and Java 8.

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
* https://issues.apache.org/jira/projects/WW/

You can download this version from our download page.
* https://struts.apache.org/download.cgi#struts-ga


Regards
--
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

CVE-2023-50164: Apache Struts: File upload component had a directory traversal vulnerability

[Lukasz Lenart]

Severity: critical

Affected versions:

- Apache Struts 2.0.0 through 2.5.32
- Apache Struts 6.0.0 through 6.3.0.1

Description:

An attacker can manipulate file upload params to enable paths traversal and 
under some circumstances this can lead to uploading a malicious file which can 
be used to perform Remote Code Execution.
Users are recommended to upgrade to versions Struts 2.5.33 or  Struts 6.3.0.1 
or greater to fix this issue.

Credit:

Steven Seeley (reporter)

References:

https://lists.apache.org/thread/yh09b3fkf6vz5d6jdgrlvmg60lfwtqhj
https://struts.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-50164


-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: The different output with Date whether the Http request have application/json

[Lukasz Lenart]

I wouldn't mix the REST plugin (which has it's own JSON handler) with
the JSON plugin - use one or another.


Regards
-- 
Łukasz
mobile +48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts 6.3 tags do not automatically evaluate the value field against the ognl stack

[Lukasz Lenart]

wt., 28 lis 2023 o 17:43 Yasser Zamani  napisał(a):
>
> Hi Nate,
>
> Thanks for the detailed info and the PoC which enabled me to debug the issue!
>
> The issue is introduced by [1] lines insertions which has changed the path of 
> the execution to findValue(expr, class) instead of findValue(expr). 
> findValue(expr, class) simply returns expr without evaluating it when class 
> is String and expr doesn't have %{. Before this change Struts used to use 
> findValue(expr) which evaluates expr.
>
> @Lukasz, what's your idea? looks like a regression right? Because Radio value 
> class looks like that can be Boolean according to Nate's sample.
>
> Regards,
> Yasser
>
> [1] 
> https://github.com/apache/struts/pull/577/files#diff-812c02fab412aaa588054c477048432288505ef1978d53d5b23ce9e5661f8492R83-R86

Reverting this change will break support for Enums, @Nate could you
register a bug in JIRA so we can try to figure out a proper solution?


Thanks & regards
-- 
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Struts 6.3 tags do not automatically evaluate the value field against the ognl stack

[Lukasz Lenart]

Hello Nate,

I approved your message but to get replies from the members of the
Struts User group please subscribe to the list [1]
[1] https://struts.apache.org/mail.html

Cheers
Lukasz

pt., 24 lis 2023 o 16:32 Yasser Zamani  napisał(a):
>
> Hi Nate,
>
> Thanks for reaching out!
>
> What I can't understand is how your app evaluates the value. Because I see 
> the following in Struts UIBean.java since 2006:
>
> // see if the value was specified as a parameter already
> if (parameters.containsKey("value")) {
> parameters.put("nameValue" , parameters.get("value"));
> } else {
>
> which I think means that it doesn't evaluate value if you've already set it. 
> As far as I remember Struts evaluates name to calculate value if it's not 
> already set.
>
> Don't you have some specific magic in your app? Could you please see also 
> Struts logs for any WARN message?
>
> Regards,
> Yasser
>
> 
> From: Nate Kerkhofs 
> Sent: Friday, November 24, 2023 3:23 PM
> To: user@struts.apache.org
> Subject: Struts 6.3 tags do not automatically evaluate the value field 
> against the ognl stack
>
> Greetings,
>
> I am currently upgrading a Struts 2.5 project to Struts 6.3, and I ran into 
> an issue with Struts 6.3 tags not evaluating the value against the ognl 
> stack. I have reproduced this issue both with the radio map included in the 
> struts2-core jar and with a custom radiomap.ftl, and also with an s:textfield 
> instead of an s:radio. In both cases, the value attribute on the source page 
> doesn't get resolved against the ognl stack, instead using the string literal 
> entered in the value attribute.
>
> I have about 140 s:radio components formatted like below, with "locked" being 
> a Boolean field in the Action java controller:
>
> 
>  list="lockedOptionMap" id="locked" name="locked" value="locked" />
>
> In this case, none of the radios with a value set are setting their checked 
> status based on the boolean value because parameters.nameValue doesn't get 
> evaluated by ognl. If I remove the value attribute or make it an explicit 
> ognl expression using %{}, it does resolve the attribute against the ognl 
> stack and select the right item, but with the code above, the value got 
> resolved against the ognl ValueStack in 2.5, but that doesn't happen in 6.3. 
> Instead, it just sets nameValue to "locked" or whatever string literal 
> "value" is set to.
>
> I cannot find any mention of this breaking change in the migration guide, 
> though I did find an issue dating back to 2007 mentioning a similar problem: 
> https://issues.apache.org/jira/browse/WW-1907 which means that this either is 
> a regression or it a deliberate design decision to no longer evaluate this 
> property against the ognl stack.
>
> Either way, I'd like to know whether this is an intentional change, and if so 
> what the recommended way is to use a field on the ognl stack to configure the 
> value of a field: should I add an explicit %{} evaluation symbol around the 
> value attribute, or should I just leave out the value attribute entirely, 
> instead relying solely on the name attribute set on the tag?
>
> Kind regards,
>
> Nate Kerkhofs
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

[ANN] Apache Struts 2.5.x EOL

[Lukasz Lenart]

The Apache Struts Project Team would like to inform you that the
Struts 2.5.x web framework will reach its end of life in 6 months and
won’t be officially supported.

Please check the following reading to find more details.
https://struts.apache.org/struts25-eol-announcement

Apache Struts 2.5.x EOL Announcement, including a detailed Q/A section.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Commercial support

[Lukasz Lenart]

Hi,

I've prepared a PR with a list of companies which provide Commercial
Support for Apache Struts and JavaEE applications built based on the
framework.
Do you know any of that?

https://github.com/apache/struts-site/pull/207


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: ViewPreparer issue after updating from 6.2.0 to 6.3.0.1

[Lukasz Lenart]

wt., 3 paź 2023 o 17:05 Chris Scroll  napisał(a):
>
> After I updated to struts 6.3.0.1 I am receiving the following exception:
>
> java.lang.ClassCastException: helpers.preparer.BreadCrumbPreparer cannot be
> cast to org.apache.tiles.api.preparer.ViewPreparer
>
> If I revert back to struts2-tiles-plugin-6.2.0.jar the program runs without
> exceptions.
>
> Note: My BreadCrumbPreparer class implements 'ViewPreparer' from
> tiles-api-3.0.8.jar

Could you post the whole stack? As far as I see the ViewPreparer
interface [1] is part of the plugin, maybe we have both JARs on
classpath - tiles-api & struts2-tiles-plugin?

[1] 
https://github.com/apache/struts/blob/master/plugins/tiles/src/main/java/org/apache/tiles/api/preparer/ViewPreparer.java


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Form array data disappearing if array is over 256?

[Lukasz Lenart]

pt., 29 wrz 2023 o 23:42 Chris Scroll  napisał(a):
>
> I upgraded from struts 2.5.30 to 6.3.0.1 and updated to the new
> jakarta-stream to fix an issue.
>
> My List:
> private List tags;
>
> If a form has over 256 array elements (Example: tag[0] to tag[300])  and it
> is submitted/posted I only get the first 256 array elements in my struts
> action (itag.size(); will be 256 instead of 299).
>
> Those first 256 elements of my array have the correct information, but
> everything else is as if it never existed. There are also no errors thrown
> or errors in the console.
>
> Is this a bug, or is there some sort of setting I can change?

It isn't a bug, there is a constant you can change, please read this section
https://struts.apache.org/core-developers/type-conversion#auto-growth-collection-limit


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Implementation Of Authorization and Authorization in struts2.5

[Lukasz Lenart]

pt., 15 wrz 2023 o 07:09 Tanveer Alaie  napisał(a):
> Could you suggest the best way to implement the Authorization and
> Authorization in struts2.5

This is a wide question and it would be good to be more specific, what
kind of requirements do you have?

In most cases you can use a dedicated interceptor to perform both, yet
Struts doesn't provide any. You can use Apache Shiro as it was showed
in this example [1] or you can use Spring Security as well [2]

[1] https://github.com/apache/struts-examples/tree/master/shiro-basic
[2] 
https://stackoverflow.com/questions/14333999/how-to-integrate-spring-security-and-struts2


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Митна база 2023. Оновлення ✅

[Lukasz Lenart]

Sorry, my mistake :( I approved a wrong message instead of the
announcement one :\

śr., 13 wrz 2023 o 15:54 Імпорт, експорт України
 napisał(a):
>
> імпорт та експорт в Excel, CronosДоступна
> повна митна база України
> 01 січня - 31 серпня 2023
> Це єдине в Україні джерело:
> - реальних клієнтів на свою продукцію
> за кордоном;
> - перевірених постачальників
> конкурентів;
> - цін імпорту-експорту українських
> компаній.
> Коли товар перетинає кордон, вся
> інформація вноситься до цієї бази:
> - назви імпортерів-експортерів
> України та їх закордонних партнерів;
> - коди УКТЗЕД та опис товару, який був
> ввезений в Україну або вивезений;
> - суму ввезеного-вивезеного товару,
> його масу, кількість;
> - країни імпорту, експорту, походження
> товару;
> - умови постачання Incoterms та ін.
> Формат: Excel, Cronos.
> Зразок надішлемо за запитом
> 
> Telegram: @Papa_Agency
> Viber: +38 096 884 01 31
> WhatsApp: +38 095 511 33 12
> Натисніть Unsubscribe
> http://group.jamdesign.com.ua/lists/ky762pvo6mc9c/unsubscribe/bg857ma12tcc8/ez649g1x6ead0,
> щоб більше не отримувати сповіщення
> про вихід свіжих баз
>

[ANN] Apache Struts 6.3.0.1, 6.1.2.2, 2.5.32

[Lukasz Lenart]

The Apache Struts group is pleased to announce that Apache Struts
versions 6.3.0.1, 6.1.2.2 & 2.5.32 are available as “General
Availability” releases. The GA designation is our highest quality
grade.

The Apache Struts is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework has been
designed to streamline the full development cycle, from building, to
deploying, to maintaining applications over time.

This version addresses a potential security vulnerability described in
S2-065 - please read the mentioned security bulletins for more
details. This is a drop-in replacement and upgrade should be
straightforward.
* https://cwiki.apache.org/confluence/display/WW/S2-065

Please read the Version Notes to find more details about performed bug
fixes and improvements.
* https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0.1
* https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.1.2.2
* https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.32

All developers are strongly advised to perform this upgrade.

The 6.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 3.1,
JSP API 2.1, and Java 8.

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
* https://issues.apache.org/jira/projects/WW/

You can download this version from our download page.
* https://struts.apache.org/download.cgi#struts-ga


Regards
-- 
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

[ANN] Apache Struts 6.3.0

[Lukasz Lenart]

The Apache Struts group is pleased to announce that Apache Struts
version 6.3.0 is available as a “General Availability” release. The GA
designation is our highest quality grade.

The Apache Struts is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework has been
designed to streamline the full development cycle, from building, to
deploying, to maintaining applications over time.

> Note: This version includes the whole code of retired Apache Tiles, when you 
> use the Struts Tiles plugin please remove any external dependencies to the 
> Apache Tiles as the whole code is already included in the plugin.
> See WW-5233 for more details - https://issues.apache.org/jira/browse/WW-5233

Below is a full list of all changes:

Bug
WW-5330 - Issue when submitting a form with a textarea containing more
than 4000 characters.
WW-5331 - Access to request attributes via tags is broken

Improvement
WW-5233 - Include Apache Tiles code base in the Tiles plugin
WW-5321 - notify / document about new maxStringLength limitation
WW-5327 - Stop using JavaBeans notation for setters in
SecurityMemberAccess & MemberAccessValueStack
WW-5332 - Validate excluded package name list for missing commas
WW-5334 - Misc VelocityManager code cleanup
WW-5336 - Merge OgnlTool class into StrutsUtil class
WW-5337 - Improve performance of excluded classes and packages

Dependency
WW-5315 - Upgrades ASM to version 9.5
WW-5316 - Upgrades commons-io to version 2.13.0
WW-5317 - Upgrades log4j-api to version 2.20.0
WW-5318 - Upgrades slf4j-api to version 2.0.7
WW-5320 - finish Reproducible Builds
WW-5322 - Upgrade Jackson version to 2.15.2
WW-5323 - Upgrade JasperReports to version 6.20.5
WW-5325 - Upgrade commons-lang3 to version 2.13.0
WW-5329 - Upgrade xstream to version 1.4.20

Please read the Version Notes to find more details about performed bug
fixes and improvements.
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.3.0

All developers are strongly advised to perform this upgrade.

The 6.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 3.1,
JSP API 2.1, and Java 8.

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
https://issues.apache.org/jira/projects/WW/

You can download this version from our download page.
https://struts.apache.org/download.cgi#struts-ga


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

Just to keep you in the loop - we are in touch with Jetbrains to
donate the plugin to ASF :)

sob., 26 sie 2023 o 15:50 Burton Rhodes  napisał(a):
>
> Nice. Sounds good.
>
>
> -- Original Message --
> From "Lukasz Lenart" 
> To "Struts Users Mailing List" 
> Date 8/26/2023 7:41:52 AM
> Subject Re: Intellij Struts 2 Plugin for 6.x DTD
>
> >sob., 26 sie 2023 o 14:09 Burton Rhodes  napisał(a):
> >>  Curious... with a separate repository, how would you submit a PR to 
> >> intellij with an updated version? Do you think they review/accept a 
> >> version from another repository or would you have to copy code over to the 
> >> "intellij-obsolete-plugins" repository prior to submitting for every 
> >> update?
> >
> >I assume we can submit it as a new plugin to the Jetbrain marketplace
> >https://plugins.jetbrains.com/docs/intellij/publishing-plugin.html
> >
> >
> >Regards
> >--
> >Łukasz
> >
> >-
> >To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> >For additional commands, e-mail: user-h...@struts.apache.org
> >
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: How to implement s:checkbox inverse value?

[Lukasz Lenart]

As far I understand you need this



pt., 1 wrz 2023 o 14:15 Burton Rhodes  napisał(a):
>
> Not sure why I am hung up on this, but I'm trying to present a simple
> checkbox that functions inversely to the parameter value. In other words,
> when the value is true, the checkbox should be unchecked (and vice versa).
> I'm trying to avoid creating a specific Action variable for this or a
> hidden form field.  I'm sure I'm missing something very simple here, but
> can anyone tell me how to do this?
>
> Attempt 1
>  name="viewFilter.showCompleted" value="%{!viewFilter.showCompleted}"
> submitUnchecked="true"
> />
>
> Attempt 2
>  submitUnchecked="true" />

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Jakarta EE9/10

[Lukasz Lenart]

Not yet

wt., 29 sie 2023 o 17:11 Prasanth  napisał(a):
>
> Hi Lukasz,
>
> Do you know if the work has started to migrate Struts2 to Jakarta EE?
>
> Thanks,
> Prasanth
>
> On 11/1/22 4:05 AM, Lukasz Lenart wrote:
> > pon., 31 paź 2022 o 15:20 Prasanth  napisał(a):
> >> Thank you Lukasz. Is there a roadmap for Struts 7 or when it might be 
> >> released?
> > No exact date, there are a few things that need to be done first like
> > moving Tag support into a plugin
> >
> >
> > Regards

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

sob., 26 sie 2023 o 14:09 Burton Rhodes  napisał(a):
> Curious... with a separate repository, how would you submit a PR to intellij 
> with an updated version? Do you think they review/accept a version from 
> another repository or would you have to copy code over to the 
> "intellij-obsolete-plugins" repository prior to submitting for every update?

I assume we can submit it as a new plugin to the Jetbrain marketplace
https://plugins.jetbrains.com/docs/intellij/publishing-plugin.html


Regards
-- 
Łukasz

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

Finally circling back to this :)

Thanks a lot Burton for all the explanations, I was planning to setup
a new ASF repository struts-idea and copy your code into it. I wonder
if I can drop all other plugins and just have the Struts plugin. As
far as I know the plugin uses Apache 2.0 license so we can make any
changes we want to release under the ASF umbrella. I assume we just
need this to be copied:

https://github.com/burtonrhodes/intellij-obsolete-plugins/tree/master/struts2

Let me know what you think

Best regards
Łukasz

niedz., 30 lip 2023 o 17:53 Burton Rhodes  napisał(a):
>
> Lukasz,
> Many thanks. I think putting this under the Struts umbrella is a good
> idea.  Feel free to copy or fork my code here:
> https://github.com/burtonrhodes/intellij-obsolete-plugins
>
> Yann Cebron at Intellij didn't like my package refactor in my original
> update, so in order to remove all the noise from my forked master branch, I
> did a hard update removing several commits.  I also reverted back to the
> original bumped Struts Plugin v2023.2.1.  I realize this really isn't the
> "correct" way to do this, but it will give us a clean slate to move forward
> with.
>
> My latest version should work with intellij 232.x.  I am currently using
> intellij v232.8660.185 and everything is working fine.  Let me know if this
> is not the case for you. You can download the latest build here:
> https://github.com/burtonrhodes/intellij-obsolete-plugins/releases/tag/v2023.2.1
>
> Lastly, I closed my PR request to the upstream branch because of Yann's two
> requirements (https://github.com/JetBrains/intellij-obsolete-plugins/pull/11
> ).
> 1) Undo package refactor for the "main/java/com/intellij/struts2/ognl"
> directory.
> - I'm still confused about this since none of the class package names match
> the directory structure. Even the associated tests are in the correct
> "test/java/com/intellij/lang/ognl" directory. One or the other, IMHO,
> should be refactored.
>
> 2) Implement tests for the new 6.0 DTD.
> - I am unable to do this since I can't figure out how to get past an
> IllegalAccessError when running tests as described here:
> https://github.com/JetBrains/intellij-obsolete-plugins/pull/11#issuecomment-1646868223
>
> #1 is solved in my current release.  However, with #2 I am stuck. If you
> can figure out how to implement some tests, the PR would be accepted and
> patched into the Intellij Plugin Repository which would be ideal.
>
> Thanks,
> Burton
>
> On Sun, Jul 30, 2023 at 12:57 AM Lukasz Lenart 
> wrote:
>
> > czw., 13 lip 2023 o 19:11 Burton Rhodes 
> > napisał(a):
> > >
> > > Apologies for the additional email, but I believe this latest version is
> > > working properly:
> > >
> > https://github.com/burtonrhodes/intellij-obsolete-plugins/releases/tag/v2023.2.2
> > >
> > > I welcome any feedback.
> >
> > Thanks a lot Burton for taking care of this, nicely done! I wonder if
> > we should bring the plugin under the ASF umbrella as part of the
> > Struts project?
> >
> > Could you upgrade the plugin to be compatible with IDEA build 232.x?
> > > Incompatible: requires IDE build 231.* or earlier
> >
> >
> > Regards
> > --
> > Łukasz
> > + 48 606 323 122 http://www.lenart.org.pl/
> >
> > -
> > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> > For additional commands, e-mail: user-h...@struts.apache.org
> >
> >

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Tiles in Struts 6.2.0

[Lukasz Lenart]

śr., 16 sie 2023 o 12:44 Yew Hwa Ho  napisał(a):
>
> Hi Lukasz,
>
> Can I check if there is a timeline for the release of Struts 6.2 version
> which contains the integrated Tiles package?

Tiles will be integrated into Struts 6.3.0 - 6.2.0 has been already
released [1]. And all the important issues discovered after releasing
6.2.0 have been addressed [2] so I expect to have a new RC soon - you
can test the previous RC1 [3] if you want to

[1] https://struts.apache.org/announce-2023#a20230710
[2] https://issues.apache.org/jira/projects/WW/versions/12353383
[3] https://lists.apache.org/thread/1x07o23p8wz5863f7jxdg8lfjzdbxg47


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

pon., 14 sie 2023 o 19:52 Tellis, Wyatt
 napisał(a):
> Any luck with tracking the cause?

Yeah, I finally found the core issue, it's related to
https://issues.apache.org/jira/browse/WW-5196

Basically instead of using:

public Object get(final String key) {
return request.getAttribute(key);
}

I just have to use a proper signature which is:

public Object get(final Object key) {
return request.getAttribute(key.toString());
}

Would you mind opening a ticket in our JIRA?
https://issues.apache.org/jira/projects/WW/issues/


Kind regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

Interesting, what's even more interesting this works:




Set attempt #1: 
Set attempt #2: 

Need to dig into that


Regards
--
Łukasz


czw., 3 sie 2023 o 02:40 Tellis, Wyatt 
napisał(a):
>
> After doing some more debugging it looks like the issue is triggered when 
> there are multiple calls to c:set. If you have the following code:
>
> <%@ page contentType="text/html; charset=UTF-8" %>
> <%@taglib uri="http://java.sun.com/jsp/jstl/core; prefix="c" %>
> <%@ taglib prefix="s" uri="/struts-tags" %>
> 
> 
> 
> 
>
> 
> 
> Set attempt #1: 
>
> 
> Set attempt #2: 
> 
> 
>
>
> On 6.1.2.1 you get:
>
> Set attempt #1: success
> Set attempt #2: success
>
>
> But on 6.2.0 you only get:
>
> Set attempt #1: success
> Set attempt #2:
>
>
>
> Note: the call to  returns nothing in 
> 6.2.0
>
> Wyatt
>
>
> -Original Message-
> From: Lukasz Lenart 
> Sent: Saturday, July 29, 2023 10:48 AM
> To: Struts Users Mailing List 
> Subject: Re: Set tag not working in 6.2.0
>
> sob., 29 lip 2023 o 15:38 Tellis, Wyatt
>  napisał(a):
> >
> > No, its just the standard JSTL Core set tag:
>
> Just tested the following setup and it just works with Struts 6.2.0
> and Java 8/11/17
>
> 
> 
> ${listType} / ${lcType}
>
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 
> https://urldefense.com/v3/__http://www.lenart.org.pl/__;!!LQC6Cpwp!oGpVcazX0XRptUnDTirR-XJ4UuG5OFpnK80nZlEJ9UMfPgTA08wlxZnIBHl6-xAnxzscWCRqDnjth8ljfHYvCTUHlvg$
>
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Intellij Struts 2 Plugin for 6.x DTD

[Lukasz Lenart]

czw., 13 lip 2023 o 19:11 Burton Rhodes  napisał(a):
>
> Apologies for the additional email, but I believe this latest version is
> working properly:
> https://github.com/burtonrhodes/intellij-obsolete-plugins/releases/tag/v2023.2.2
>
> I welcome any feedback.

Thanks a lot Burton for taking care of this, nicely done! I wonder if
we should bring the plugin under the ASF umbrella as part of the
Struts project?

Could you upgrade the plugin to be compatible with IDEA build 232.x?
> Incompatible: requires IDE build 231.* or earlier


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

sob., 29 lip 2023 o 15:38 Tellis, Wyatt
 napisał(a):
>
> No, its just the standard JSTL Core set tag:

Just tested the following setup and it just works with Struts 6.2.0
and Java 8/11/17



${listType} / ${lcType}



Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/


-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

sob., 29 lip 2023 o 02:32 Tellis, Wyatt
 napisał(a):
> > Because "#request." is about accessing Request attributes 
> > not parameters.
>
> Understood, but we're using  value="requestAttributeValue" scope="request"/> to update the request 
> attributes

Is this your custom function? Could you share its logic with me?


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

In which version this worked for you? Because
"#request." is about accessing Request attributes not
parameters.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

czw., 20 lip 2023 o 18:28 Tellis, Wyatt
 napisał(a):
>
> It doesn't work.  Also I was debugging the set tag and noticed the RequestMap 
> in the ValueStack that gets passed to the set tag doesn't even contain the 
> listType attribute.  This is different behavior from the previous versions of 
> Struts.

It looks like a problem with accessing the #request scope in the
 tag - please notice this is a potential security
vulnerability in your app, accessing the raw request can be dangerous


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Set tag not working in 6.2.0

[Lukasz Lenart]

śr., 19 lip 2023 o 20:59 Tellis, Wyatt 
napisał(a):
> We noticed the following snippet of code no longer works in 6.2.0:
>
> <%@taglib uri="http://java.sun.com/jsp/jstl/core; prefix="c" %>
> <%@taglib uri="/struts-tags" prefix="s"%>
>
> 
> 

Could you try to use  to access this value?


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Tiles in Struts 6.2.0

[Lukasz Lenart]

czw., 13 lip 2023 o 04:06 Yew Hwa Ho  napisał(a):
> With the release of Struts 6.2.0, can I check if Tiles has been directly
> ported to Struts Tiles plugin and is no longer using the Tiles project?

No, we are going to release a new version soon which will contain the
integrated Tiles package. I will prepare a RC version first to check
if everything is ok.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Fwd: [ANN] Apache Struts 6.2.0

[Lukasz Lenart]

FYI

-- Forwarded message -
Od: Lukasz Lenart 
Date: pon., 10 lip 2023 o 10:37
Subject: [ANN] Apache Struts 6.2.0
To: 
Cc: 


The Apache Struts group is pleased to announce that Apache Struts
6.2.0 is available as a “General Availability” release. The GA
designation is our highest quality grade.
https://struts.apache.org/announce-2023#a20230710

Below is a full list of all changes.

Bug
WW-4434 - datetextfield.ftl is missing
WW-5199 - StrutsPrepareFilter and StrutsExecuteFilter do not support
forwarding to another action
WW-5263 - CSP related interceptors have wrong short names
WW-5270 - Forwarding from a Struts excluded URL to an Action not working
WW-5271 - Select tag NOT working when using list=”#{ … }”
WW-5272 - java.lang.UnsupportedOperationException in the Time component
WW-5276 - Cleanup method of request is not called
WW-5289 - Execute and Wait Interceptor prevents JVM shutdown
WW-5295 - s:date ignores LocalTime
WW-5296 - Wrong DTD version
WW-5301 - Impossible to select alternate default VelocityManager bean
WW-5302 - Autogenerated html ID bases on unevaluated value of the
name/action/method attributes
WW-5307 - Confusing documentation about ognl
WW-5309 - NamedVariablePatternMatcher throws when pattern begins with a variable
WW-5310 - s:url does not handle equal sign correctly
WW-5311 - NamedVariablePatternMatcher throws an
IllegalArgumentException when named variable is not the last part of
the sequence
WW-5312 - ExecuteAndWaitInterceptor inconsistent wait processing behaviour

New Feature
WW-5275 - Allow to configure more flexible Content-Security-Policy

Improvement
WW-4404 - Implement HttpInterceptor
WW-5196 - Make RequestMap and ApplicationMap to use generics, also
correct SessionMap to always be of type 
WW-5243 - Removes support for “struts.mapper.action.prefix.crossNamespaces”
WW-5251 - Remove deprecated interfaces used with ServletConfigInterceptor
WW-5253 - Remove deprecated methods from DefaultUrlHelper
WW-5261 - Refactor TagUtils#getStack()
WW-5262 - Extract excluded classes and beans out of struts-default.xml
WW-5264 - Extract XSLT result into a dedicated plugin
WW-5265 - Allow removal of a single/specific container provider
WW-5266 - Add configuration option for a per-file max size for
multipart requests
WW-5268 - Add configuration option to exempt classes from OGNL package
exclusions
WW-5273 - Support fileupload using native Servlet API 3.1 logic
WW-5280 - Cleanup NoParameters interfaces
WW-5283 - Update Struts Archetypes
WW-5285 - Upgrade commons-fileupload to ver 1.5 and add option to
limit number of accepted files
WW-5288 - Make excluded package exemption logic more strict
WW-5290 - Refactor ConfigurationManager
WW-5292 - Allow overriding of Operations classes in two filter setup
and assorted clean up
WW-5293 - Allow loading XML configuration from other than filesystem
WW-5304 - Drop deprecated methods from ActionContext
WW-5308 - Add minlength and maxlength to textarea on javatemplates plugin
WW-5314 - Do not log warnings for bad user input from JakartaMultiPartRequest

Task
WW-5278 - Clean up duplicated code across ActionValidatorManagers
WW-5279 - Improve readability of XmlConfigurationProvider class
WW-5284 - Further clean up ActionValidatorManager implementations
WW-5298 - Clean up StrutsVelocityContext
WW-5299 - Clean up ActionChainResult
WW-5300 - Make Dispatcher methods overridable

Dependency
WW-5269 - Upgrade Jackson to version 2.14.1
WW-5274 - Mark Pell Multipart plugin as deprecated
WW-5277 - Upgrade Freemarker to version 3.2.32

Version Notes
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.2.0

**All developers are strongly advised to perform this upgrade.**

The 6.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 3.1,
JSP API 2.1, and Java 8.

Should any issues arise with your use of any version of the Apache
Struts framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.
https://issues.apache.org/jira/projects/WW/

You can download this version from our download page
https://struts.apache.org/download.cgi#struts-ga


Regards
--
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Re: Sample application on target Struts 6.1.2.1 not working with Open JDK 1.8 and Tomcat 8.5+

[Lukasz Lenart]

wt., 27 cze 2023 o 08:55 Garg, Ankit  napisał(a):

>
>
>
What is included in EAR libraries, Server Runtime and Web App Libraries?
Maybe you have duplicated JRAs there? Also is worth clean up Temp/Work
folders as described here
https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration#Struts2.5to6.0.0migration-Temp/WorkdirectoryofApplicationServer/ServletContainer

SEVERE: Exception starting filter [struts2]
>
> *java.lang.ClassNotFoundException*:
> org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter
>
>at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(
> *WebappClassLoaderBase.java:1420*)
>
>at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(
> *WebappClassLoaderBase.java:1228*)
>
>at org.apache.catalina.core.DefaultInstanceManager.loadClass(
> *DefaultInstanceManager.java:486*)
>
>at
> org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(
> *DefaultInstanceManager.java:468*)
>
>at org.apache.catalina.core.DefaultInstanceManager.newInstance(
> *DefaultInstanceManager.java:141*)
>
>at org.apache.catalina.core.ApplicationFilterConfig.getFilter(
> *ApplicationFilterConfig.java:252*)
>
>at org.apache.catalina.core.ApplicationFilterConfig.(
> *ApplicationFilterConfig.java:100*)
>
>at org.apache.catalina.core.StandardContext.filterStart(
> *StandardContext.java:4343*)
>
>at org.apache.catalina.core.StandardContext.startInternal(
> *StandardContext.java:4976*)
>
>at org.apache.catalina.util.LifecycleBase.start(
> *LifecycleBase.java:183*)
>
>at org.apache.catalina.core.ContainerBase$StartChild.call(
> *ContainerBase.java:1362*)
>
>at org.apache.catalina.core.ContainerBase$StartChild.call(
> *ContainerBase.java:1352*)
>
>at java.base/java.util.concurrent.FutureTask.run(
> *FutureTask.java:264*)
>
>at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(
> *ThreadPoolExecutor.java:1136*)
>
>at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(
> *ThreadPoolExecutor.java:635*)
>
>at java.base/java.lang.Thread.run(*Thread.java:833*)
>

This class is included in struts-core-6.1.2.1.jar, but somehow Tomcat
didn't load the JAR, I would check your classpath/library settings as the
JAR isn't deployed to the Tomcat. And use Maven which is a way easier to
manage dependencies.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

Re: upgrading from struts 2.5.30 to 2.5.31

[Lukasz Lenart]

pon., 26 cze 2023 o 07:00 Rohan Patil7 
napisał(a):
> We are currently using struts 2.5.30, for upgrading it to struts 2.5.31 what 
> process need to followed.

It should be a drop-in upgrade, without any breaking changes.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Urgent and priority help on Struts 1.3 upgrade to Struts 6.0

[Lukasz Lenart]

pt., 23 cze 2023 o 07:45 Ankit Garg  napisał(a):
> May I check from core framework perspective, is it safe to say that more of 
> the features should work as usual if upgrade from 6.0.0 to 6.1.2.1 directly?
> In our approach, we are directly applying Struts runtime via pom.xml in code 
> base and trying to fix issues 1 by 1at runtime.
> I am not sure if this is advisible from Struts upgrade perspective especially 
> on vulnerbility fix standpoint.

Yes, there shouldn't be a big problem upgrading from 6.0.0 to 6.1.2.1


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Urgent and priority help on Struts 1.3 upgrade to Struts 6.0

[Lukasz Lenart]

pt., 23 cze 2023 o 06:46 Ankit Garg  napisał(a):
> Dear Lukasz Lenart,
>
> Would you like to share some references to understand the impact between 
> 6.0.0.0 to 6.1.2.1 i.e. June 2023 release?
> https://cwiki.apache.org/confluence/display/WW/Migration+Guide -- We have 
> explored but could find specific documentation stating difference between 
> 6.0.0.0 to 6.1.2.1.

Right, forgot to update the main page. You can find the explanation here
https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.1.2.1


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Urgent and priority help on Struts 1.3 upgrade to Struts 6.0

[Lukasz Lenart]

pon., 5 cze 2023 o 17:07 Ankit Garg  napisał(a):
> We are following Struts 2.0 in Action and below references.
> https://struts.apache.org/getting-started/
> Let us know if any other material should be good to leverage in addition to 
> what we have. Thank you.

Those tutorials are a good starting point, you can also examine our
examples which provides a practical knowledge
https://github.com/apache/struts-examples


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org