Re: [CLOSED][VOTE][FASTRACK] Struts 2.3.24.1

2015-09-23 Thread Lukasz Lenart
Vote passed! 3x +1 GA (binding) 1x +1 GA (non-binding) 2015-09-22 20:38 GMT+02:00 Lukasz Lenart : > The Struts 2.3.24.1 test build is now available. It includes the > latest security patch which fixes one possible vulnerabilities: > - Special top object can be used to access Struts' internals > >

Re: [GitHub] struts pull request: WW-4540: Strict DMI

2015-09-23 Thread Christoph Nenning
> >> There is just one issue left: Setting strict-method-invocation="false" > >> affects only actions configured in XML. When PackageConfig is created by > >> XmlConfigurationProvider that field is set but > >> PackageBasedActionConfigBuilder from convention-plugin does not set it. > >> > >> The

Re: [GitHub] struts pull request: WW-4540: Strict DMI

2015-09-23 Thread Christoph Nenning
> > I was wondering why the method was not blocked in Greg's sample. I tried > > to reproduce his case based on Łukasz' sample app. But no luck. > > > > With the framework never invoked the action > > specified there. It was always the form-action and it's execute() method. > > You must enable

Re: [GitHub] struts pull request: WW-4540: Strict DMI

2015-09-23 Thread Lukasz Lenart
2015-09-23 15:46 GMT+02:00 Christoph Nenning : > I was wondering why the method was not blocked in Greg's sample. I tried > to reproduce his case based on Łukasz' sample app. But no luck. > > With the framework never invoked the action > specified there. It was always the form-action and it's exec

Re: [GitHub] struts pull request: WW-4540: Strict DMI

2015-09-23 Thread Christoph Nenning
> >> From: Greg Huber > >> To: Struts Developers List , > >> Date: 17.09.2015 09:37 > >> Subject: Re: [GitHub] struts pull request: WW-4540: Strict DMI > >> > >> I was testing using: > >> > >> > /> > >> > >> and it returned the value in the name field on the bean. > > > > I don't know how is imp

Re: [VOTE][FASTRACK] Struts 2.3.24.1

2015-09-23 Thread Christoph Nenning
+1 (binding) [ ] Leave at test build [ ] Alpha [ ] Beta [x] General Availability (GA) Lukasz Lenart schrieb am 22.09.2015 20:38:32: > From: Lukasz Lenart > To: Struts Developers List , > Date: 22.09.2015 20:38 > Subject: [VOTE][FASTRACK] Struts 2.3.24.1 > > The Struts 2.3.24.1 test

Re: [VOTE][FASTRACK] Struts 2.3.24.1

2015-09-23 Thread Johannes Geppert
+1 (binding) [ ] Leave at test build [ ] Alpha [ ] Beta [x] General Availability (GA) # web: http://www.jgeppert.com twitter: http://twitter.com/jogep 2015-09-23 14:48 GMT+02:00 Lukasz Lenart : > 2015-09-22 20:38 GMT+02:00 Lukasz Lenart : > > [X

Re: [VOTE][FASTRACK] Struts 2.3.24.1

2015-09-23 Thread Lukasz Lenart
2015-09-22 20:38 GMT+02:00 Lukasz Lenart : > [X] General Availability (GA) +1 (binding) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ - To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional co

Jenkins build is back to normal : Struts-JDK7-pull-request #69

2015-09-23 Thread Apache Jenkins Server
See - To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org

Re: [GitHub] struts pull request: WW-4540: Strict DMI

2015-09-23 Thread Lukasz Lenart
2015-09-23 8:17 GMT+02:00 Lukasz Lenart : >> There is just one issue left: Setting strict-method-invocation="false" >> affects only actions configured in XML. When PackageConfig is created by >> XmlConfigurationProvider that field is set but >> PackageBasedActionConfigBuilder from convention-plugin

Re: [VOTE][FASTRACK] Struts 2.3.24.1

2015-09-23 Thread Greg Huber
+1 nb On 22 September 2015 at 19:38, Lukasz Lenart wrote: > The Struts 2.3.24.1 test build is now available. It includes the > latest security patch which fixes one possible vulnerabilities: > - Special top object can be used to access Struts' internals > > For details and the rationale behind t