Re: DispatchAction security

2004-09-18 Thread Paul Speed
Michael McGrady wrote: Mike Kienenberger wrote: Rick Reumann <[EMAIL PROTECTED]> wrote: Mike Kienenberger wrote the following on 9/17/2004 2:17 PM: Any time you allow an end user an opportunity to specify a parameter for reflection, you're introducing security concerns. However, a

DO NOT REPLY [Bug 26336] - Empty multipart form from Opera browser results in ServletException

2004-09-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: DispatchAction security

2004-09-18 Thread Michael McGrady
Paul Speed wrote: Michael McGrady wrote: Mike Kienenberger wrote: Rick Reumann <[EMAIL PROTECTED]> wrote: Mike Kienenberger wrote the following on 9/17/2004 2:17 PM: Any time you allow an end user an opportunity to specify a parameter for reflection, you're introducing security co

Re: DispatchAction security

2004-09-18 Thread Rick Reumann
Mike Kienenberger wrote the following on 9/17/2004 7:13 PM: On the other hand, if you're just saying that you can encode your reflection dispatch name so that "/page&method=X" becomes "/a1b2c3d4e5.psc", you've just made the security more obscure. If someone figures out your encoding, they can s

DO NOT REPLY [Bug 31270] - DisptachAction discussions/proposals

2004-09-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

[Apache Struts Wiki] Updated: StrutsCatalog

2004-09-18 Thread dev
Date: 2004-09-18T11:48:15 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalog URL: http://wiki.apache.org/struts/StrutsCatalog no comment Change Log: -- @@ -22,7 +22,

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T12:01:46 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T12:03:19 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log:

[Apache Struts Wiki] New: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T12:47:51 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment New Page: ##language:en == Universal Button Utility for Struts == There is a pe

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T12:51:14 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T12:52:18 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T13:32:38 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T13:36:11 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log:

http://wiki.apache.org/struts/StrutsCatalogDispatchUtil

2004-09-18 Thread Michael McGrady
I have provided what I think is a superior rendition of SimpleDispatchAction at http://wiki.apache.org/struts/StrutsCatalogDispatchUtil , following what I think is an excellent suggestion by Hubert Rabago, viz. to use a utility class. Niall decided that was not a good idea because of the lack

Re: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil

2004-09-18 Thread Martin Cooper
Wouldn't it be better to host the actual code in CVS somewhere, rather than people having to copy/paste from the wiki, and having no way to know when it has been updated, or what the changes are? You might want to look at the Struts Applications project on SourceForge, which looks to me to be an ap

Re: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil

2004-09-18 Thread Michael McGrady
Martin Cooper wrote: Wouldn't it be better to host the actual code in CVS somewhere, rather than people having to copy/paste from the wiki, and having no way to know when it has been updated, or what the changes are? You might want to look at the Struts Applications project on SourceForge, which lo

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T14:14:40 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T14:24:31 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log:

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T14:26:32 Editor: MichaelMcGrady <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log:

DispatchUtil and SimpleDispatchAction

2004-09-18 Thread Michael McGrady
Lets compare and contrast, on the one hand, DispatchAction and its progeny, and, on the other hand, DispatchUtil and SimpleDispatchAction. What they have in common is that they are patterns relating to Strust which obtain the method name for a class. This was important initially because does

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T15:40:15 Editor: NiallPemberton <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log:

DO NOT REPLY [Bug 31270] - DisptachAction discussions/proposals

2004-09-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

[Apache Struts Wiki] Updated: StrutsCatalogDispatchUtil

2004-09-18 Thread dev
Date: 2004-09-18T19:51:51 Editor: SteveRaeburn <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogDispatchUtil URL: http://wiki.apache.org/struts/StrutsCatalogDispatchUtil no comment Change Log: --

Wiki etiquette

2004-09-18 Thread Steve Raeburn
I have removed content from the Wiki which I found objectionable. Ironically, the piece asks that critics, "Please be respectful", while the author has been decidedly disrespectful, on the Wiki and mailing list, to those who have offered *constructive* criticism of the author's ideas. Steve

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T20:21:15 Editor: SteveRaeburn <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log: --

[Apache Struts Wiki] Updated: StrutsCatalogSimpleDispatchAction

2004-09-18 Thread dev
Date: 2004-09-18T20:21:40 Editor: SteveRaeburn <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsCatalogSimpleDispatchAction URL: http://wiki.apache.org/struts/StrutsCatalogSimpleDispatchAction no comment Change Log: --

[Apache Struts Wiki] Updated: StrutsRelease124

2004-09-18 Thread dev
Date: 2004-09-18T21:04:19 Editor: MartinCooper <[EMAIL PROTECTED]> Wiki: Apache Struts Wiki Page: StrutsRelease124 URL: http://wiki.apache.org/struts/StrutsRelease124 Add vote result. Change Log: -- @@

DO NOT REPLY [Bug 31291] New: - Unable to find setter method for attribute: name

2004-09-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 31291] - Unable to find setter method for attribute: name

2004-09-18 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu