Re: UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-17 Thread Lukasz Lenart
wt., 12 lis 2024 o 09:12 Greg Huber napisał(a): > > I have my own stack, so I don't extend struts-default. > > If is removed in 6.7 then there is > no more maintenance overhead.😉 I didn't plan to remove it yet, it's already removed in 7.0 Cheers Lukasz

Re: UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-12 Thread Greg Huber
I have my own stack, so I don't extend struts-default. If is removed in 6.7 then there is no more maintenance overhead.😉 On 11/11/2024 13:04, Kusal Kithul-Godage wrote: Are you extending the 'struts-default' package though? Because then it's included on the default interceptor stack. Unfort

Re: UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-11 Thread Kusal Kithul-Godage
Are you extending the 'struts-default' package though? Because then it's included on the default interceptor stack. Unfortunately it's expected until the old file upload interceptor is removed from the default interceptor stack in Struts 7.0. It can't be removed in Struts 6.7 as applications that

Re: UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-11 Thread Greg Huber
Definitely do not have in my struts.xml but this in my jsp: multiple="multiple" /> If "name" on  s:file matches a private field (no getters/setters) in my action I get the warning. ie jsp: action class : private List uploadedFilesz = null; 2024-11-11 08:05:18,083 WARN com.opensympho

Re: UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-10 Thread Kusal Kithul-Godage
If you're able to dump a stack trace for the log warning using the debugger I can probably check further. But if I had to guess (and I may very well be wrong here) you're using one of the default interceptor stacks that includes both the old and new file upload interceptors and you've also got s:f

UploadedFilesAware SecurityMemberAccess:isAccessible message

2024-11-10 Thread Greg Huber
I just upgraded to the UploadedFilesAware version and now I see this message in my logs WARN com.opensymphony.xwork2.ognl.SecurityMemberAccess SecurityMemberAccess:isAccessible - Access to non-public [private java.util.List my.MyUpload.uploadedFiles] is blocked! Every thing is working ok. I