Re: [TEST] Apache Struts 6.5.0 test build is ready

2024-07-12 Thread i...@flyingfischer.ch
Works fine here. I can also confirm that https://issues.apache.org/jira/browse/WW-5419 is resolved. Thanks for your steady good work! Best regards Markus Am 12.07.24 um 07:47 schrieb Lukasz Lenart: Hello, This is another minor version of Struts 6.x series. Please take the time and test th

Re: [TEST] Apache Struts 7.0.0-M8 test build is ready

2024-07-12 Thread Burton Rhodes
I'm not sure if this is unique to M8, but I just turned on devMode and loading a single page in my app floods the console with these entries. I'm sure the log entries are correct, but they aren't helpful. For example, shouldn't it tell me which classes or packages or what JSP call/variable is

Re: [TEST] Apache Struts 7.0.0-M8 test build is ready

2024-07-12 Thread Kusal Kithul-Godage
Ah that'll be my last change - I'll check this, thanks! The 6.5.0 test build will have the same issue On Fri, Jul 12, 2024 at 10:17 PM Burton Rhodes wrote: > > I'm not sure if this is unique to M8, but I just turned on devMode and > loading a single page in my app floods the console with these en

Re: [TEST] Apache Struts 7.0.0-M8 test build is ready

2024-07-12 Thread Lukasz Lenart
Shouldn't this just happen once as this is a managed bean? pt., 12 lip 2024 o 15:25 Kusal Kithul-Godage napisał(a): > > Ah that'll be my last change - I'll check this, thanks! The 6.5.0 test > build will have the same issue > > On Fri, Jul 12, 2024 at 10:17 PM Burton Rhodes wrote: > > > > I'm no

Showcase app broken by struts.allowlist.classes

2024-07-12 Thread Lukasz Lenart
Hi, I'm playing a bit with our Showcase App and noticed a few issues related to the latest security changes. Here is an example method annotated as follow: @Action(value = "bean-validation", results = { @Result(name = "success", location = "bean-validation.jsp") }) @SkipValidation public Stri

Re: Showcase app broken by struts.allowlist.classes

2024-07-12 Thread Kusal Kithul-Godage
Let me take a look, I think I overlooked testing the OGNL allowlist with the Convention plugin - created WW-5440 to track. On Sat, Jul 13, 2024 at 3:04 PM Lukasz Lenart wrote: > > Hi, > > I'm playing a bit with our Showcase App and noticed a few issues > related to the latest security changes. He

Re: [TEST] Apache Struts 7.0.0-M8 test build is ready

2024-07-12 Thread Kusal Kithul-Godage
It's prototype scope which means a new instance is constructed wherever it's injected/retrieved. I'll take a look - shouldn't be too hard to fix On Sat, Jul 13, 2024 at 1:59 AM Lukasz Lenart wrote: > > Shouldn't this just happen once as this is a managed bean? > > pt., 12 lip 2024 o 15:25 Kusal K