;-)
Thanks!
Markus
Am 22.11.2012 11:17, schrieb Łukasz Lenart:
2012/11/22 i...@flyingfischer.ch :
I experience some problems with umlauts after upgrading from Struts 2.3.4.1
to 2.3.7:
Text with umlauts like 'ä' from properties files get scrambled in the JSPs,
selects and submit buttons
ple
The problem really is new since 2.3.7. I updated
- struts2-core
- struts2-tiles-plugin
- xwork-core
Markus
Am 22.11.2012 12:46, schrieb Łukasz Lenart:
2012/11/22 i...@flyingfischer.ch :
Hi Lenart
thanks for replying and the input about encoding the properties files!
Unfortunately enc
Looks good, here too...
...no more encoding issues so far.
And seems much much more performant to me than 3.4.1! ;-)
Thanks!
Markus Fischer
Am 17.12.2012 12:26, schrieb Lukasz Lenart:
Hi,
Please take a time and test the bits - any help is appreciated. The
main goal of this release is to imp
The download links for 2.3.8 are broken on
http://struts.apache.org/download.cgi#struts238
All the links contain a trailing dot too much after the version number:
wrong
http://mirror.switch.ch/mirror/apache/dist//struts/binaries/struts-2.3.8.-all.zip
correct
http://mirror.switch.ch/mirror/apac
The new tag attribute
throws
org.apache.jasper.JasperException: Unable to find setter method for
attribute: requiredLabel
...
SEVERE: IO Error executing tag: JSPException including path
'/view/editContent.jsp'.
org.apache.tiles.util.TilesIOException: JSPException
Markus
Am 04.02.2013 09
:-) Great!
Thanks for your constant effort and great work!
Markus
Am 05.02.2013 08:10, schrieb Lukasz Lenart:
Thanks for reporting! Resolved!
https://issues.apache.org/jira/browse/WW-3908
I'll wait few more days and will drop 2.3.9 and prepare a new 2.3.10
version, it would be better to disco
Yes, xhtml theme.
Ok. The * is definitively here ;-)
I stupidly misinterpreted the new tag and replaced the HTML5 required
tag by requiredLable.
Markus
Am 05.02.2013 21:13, schrieb Lukasz Lenart:
Do you use xhtml them?
And requireLabel attribute will generate just '*', but you can use
dyna
I do not get any errors any more.
ok!
Markus
Am 05.02.2013 21:24, schrieb Lukasz Lenart:
2013/2/5 i...@flyingfischer.ch :
Yes, xhtml theme.
Ok. The * is definitively here ;-)
I stupidly misinterpreted the new tag and replaced the HTML5 required tag by
requiredLable.
Does it mean ok
The link "Releases" under
http://struts.apache.org/development/2.x/index.html
seems to be broken:
http://struts.apache.org/development/2.x/downloads.html
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For
I couldn't find any problems. Runs fine...
...though I may not have the most complex situation here for testing
purposes ;-)
Markus
Am 04.03.2013 15:57, schrieb Lukasz Lenart:
to draw your attention
2013/2/28 Lukasz Lenart :
Hi,
Please take a time and test the bits - any help is appre
+1 [non binding}
Am 09.03.2013 10:56, schrieb Lukasz Lenart:
The Struts 2.3.12 test build is now available. With this release:
- expression support was added to validators' params, so you can
dynamically configure validators base on current action
- new plugin was introduced to support Tiles 3 (
There is a lot of code out there still relying on Java 6.
If there is no urgent need to use Java 7, it is no good idea to make the
framework dependent on Java 7:
We should keep a minimal backward compatibility regarding Java.
Markus Fischer
Am 18.04.2013 08:46, schrieb Johannes Geppert:
Hi,
...should have said projects instead of code ;-)
Markus Fischer
Am 18.04.2013 08:58, schrieb i...@flyingfischer.ch:
There is a lot of code out there still relying on Java 6.
If there is no urgent need to use Java 7, it is no good idea to make the
framework dependent on Java 7:
We should keep
Works here.
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)
Markus Fischer
Am 19.04.2013 10:46, schrieb Maurizio Cucchiara:
The Struts 2.3.14.1 test build is now available.
It includes the latest security patches which fix two possible vulnerabilities:
* OGNL eval exp
I had it running here in application all day. No problems so far.
Seems to be fine.
Markus
Am 14.06.2013 13:16, schrieb Lukasz Lenart:
Hi,
Please take a time and test the bits - any help is appreciated. If
there be no problem, I'm going to start Vote next week around
Wednesday
Staging Maven
1+ GA non binding
Markus Fischer
Am 19.06.2013 09:17, schrieb Lukasz Lenart:
2013/6/19 Lukasz Lenart :
The Struts 2.3.14 test build is now available. With this release:
I meant 2.3.15 :-)
Regards
-
To unsubscribe, e-mail
The Logo looks nice. Has a slight reference to the art work of M.C.
Escher. Great work.
Blue is always nice ;-)
The typography however gives the whole logo a not too modern touch,
because it uses letters with serifs. I wonder if this will match nicely
with the serif free home page of struts 2
ughts exactly. Needs a different font.
On 07/03/2014 5:41 pm, "i...@flyingfischer.ch"
wrote:
The Logo looks nice. Has a slight reference to the art work of M.C.
Escher. Great work.
Blue is always nice ;-)
The typography however gives the whole logo a not too modern touch,
because it us
s in the logo;
that
can make some printing a bit trickier.
Because we all want t-shirts and tattoos, right?
Right?
Anyone?
Sure, why not.
On Fri, Mar 7, 2014 at 6:42 AM, i...@flyingfischer.ch <
i...@flyingfischer.ch
wrote:
Voltaire and Oswald seem to be condensed fonts, while Aleg
6:42 AM, i...@flyingfischer.ch <
i...@flyingfischer.ch
wrote:
Voltaire and Oswald seem to be condensed fonts, while Alegreya Sans
SC
and
Alef and others aren't.
I always feel typography is a very difficult job and needs to be
seen in
the given case.
Maybe the graphic guy could make some suggest
Looks good! Very clean main page, great work.
Maybe the "honeycomb"-like background image in the green/blue part lacks
some contrast?
Looking forward to the new design!
Markus
Am 08.04.2014 13:07, schrieb Lukasz Lenart:
Next version of website
Main page
https://copy.com/BhaCZtoewOYV
Docum
+1 GA
Markus Fischer
Am 25.04.2014 08:37, schrieb Johannes Geppert:
+1
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Johannes
#
web: http://www.jgeppert.com
twitter: http://twitter.com/jogep
2014-04-24 23:13 GMT+02
+1
Markus
Am 03.05.2014 05:41, schrieb Paul Benedict:
+1
Cheers,
Paul
On Fri, May 2, 2014 at 4:16 PM, Don Brown wrote:
+1
On Fri, May 2, 2014 at 1:58 PM, Dave Newton wrote:
+1
On May 2, 2014 3:52 PM, "Lukasz Lenart" wrote:
The Struts 2.3.16.3 test build is now available. It inclu
preparing html & css now so I assume after Easters I'm going to
apply the new L&F :-)
2014-04-08 19:11 GMT+02:00 Ken McWilliams :
L& F is a big step up from what is there! Really nice.
On Tue, Apr 8, 2014 at 8:23 AM, i...@flyingfischer.ch
wrote:
Looks good! Very clean main
+1 not binding.
Markus Fischer
Am 04.11.2014 um 20:28 schrieb Lukasz Lenart:
Should I cancel this vote and prepare new one? If we cannot release
what was tested and verified the whole process doesn't make sense :(
Regards
+1 non binding.
Markus Fischer
Am 28.11.2014 um 08:56 schrieb Lukasz Lenart:
Thanks Volker & Greg! I think it's time to vote :)
Regards
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands,
r for being a bit pedantic, and thanks for voting :)
Regards,
René
Am 01.12.14 18:23, schrieb i...@flyingfischer.ch:
+1 non binding.
Markus Fischer
Am 28.11.2014 um 08:56 schrieb Lukasz Lenart:
Thanks Volker & Greg! I think it's time to vote
+1 Binding
Markus Fischer
Am 09.05.2015 um 09:22 schrieb Lukasz Lenart:
We need one more binding vote to push this out, anyone?
Thanks in advance
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional c
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[x] General Availability (GA)
Thanks for the good work!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Runs fine here. Thanks for all the work! 2.5 branch rocks and has a
great performance boost.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.ap
Between Tomcat 8.38 und 8.39 there seems to be a change in handling URL
parameters:
¶mxy=1|2
This will cause Tomcat to return a 400 error since 8.39. It is the
character "|" that causes the new behaviour. I suspect these changes:
https://github.com/apache/tomcat/commit/516bda676ac8d0284da3e0
Sorry! Wrong mailing list...
Markus
Am 03.12.2016 um 13:56 schrieb Łukasz Lenart:
Is it related to Apache Struts?
Cheers
Lukasz
2016-12-03 12:47 GMT+01:00 i...@flyingfischer.ch :
Between Tomcat 8.38 und 8.39 there seems to be a change in handling URL
parameters:
¶mxy=1|2
This will cause
_____
____
From: i...@flyingfischer.ch
Sent: Saturday, December 3, 2016 8:18 AM
To: Struts Developers List
Subject: Re: Valid characters in http requets: Tomcat 8.38 -> 8.39
Sorry! Wrong mailing list...
Markus
Am 03.12.2016 um 13:56 schrieb Lukasz Lenart:
ing that wrapped header lines have already been unwrapped.
(The Tomcat header processing code does the unwrapping.)"
Best regards
Markus
You may also reach me off-list, since we are on the struts-list here:
i...@flyingfischer.ch
Am 05.12.2016 um 14:09 schrieb Martin Gainty:
per
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
I get stuck with the refactored LocalizedTextUtil:
We had a change in 2.5.2 which disallowed the use of getText(String key)
in classes that cannot extend ActionSupport.
I did work around with a custom utility class that did the job, built
mainly around:
final String value = LocalizedTextUtil.fin
searches the
> hierarchy etc.
>
> On 25 June 2017 at 07:07, i...@flyingfischer.ch
> wrote:
>
>> I get stuck with the refactored LocalizedTextUtil:
>>
>> We had a change in 2.5.2 which disallowed the use of getText(String key)
>> in classes that cannot extend Ac
I detected a strange issue. The problem is not present in 2.5.10.1 but
only in 2.5.11:
In jsp:
This will not show up as icon, but as kind of scrambled text. Using
struts2-tiles-plugin.
Hard to imagine to be struts related, but could this still be possibly
related to any of the recent changes?
Another issue, since 2.5.11:
Javascript boxed messages display, if the language is the default
language (en). As soon as switching the application to another locale
(e.g. de), js-box messages do not display anymore...
...this IS NOT related to retrieving the values from the corresponding
language
> 2017-06-25 16:14 GMT+02:00 i...@flyingfischer.ch :
>> Another issue, since 2.5.11:
>>
>> Javascript boxed messages display, if the language is the default
>> language (en). As soon as switching the application to another locale
>> (e.g. de), js-bo
Am 26.06.2017 um 09:04 schrieb Lukasz Lenart:
> 2017-06-25 15:26 GMT+02:00 i...@flyingfischer.ch :
>> I detected a strange issue. The problem is not present in 2.5.10.1 but
>> only in 2.5.11:
>>
>> In jsp:
>>
>> This will not show up as icon, but as kind of
Am 26.06.2017 um 10:23 schrieb i...@flyingfischer.ch:
> Am 26.06.2017 um 09:04 schrieb Lukasz Lenart:
>> 2017-06-25 15:26 GMT+02:00 i...@flyingfischer.ch :
>>> I detected a strange issue. The problem is not present in 2.5.10.1 but
>>> only in 2.5.11:
>>>
>&g
Am 26.06.2017 um 11:17 schrieb Lukasz Lenart:
> 2017-06-26 10:50 GMT+02:00 i...@flyingfischer.ch :
>> Using
>>
>> instead of
>>
>> resolves the issue. But I still suspect a change in coding / treating
>> unicode in Struts.
>>
>> The CSS starts
Am 26.06.2017 um 11:01 schrieb Lukasz Lenart:
> 2017-06-26 10:23 GMT+02:00 i...@flyingfischer.ch :
>> Using FontAwesome
> Same here
>
>> I am on thin ice: I fear the images do display as kind of textual
>> representation of private use unicode code points, which they sho
Am 26.06.2017 um 11:55 schrieb Lukasz Lenart:
> 2017-06-26 11:50 GMT+02:00 i...@flyingfischer.ch :
>> Yes, the import statement is already there. It is a combined css file
>> (fonts and other CSS statements). Works perfect, also for 2.5.11. But
>> the webfonts seem to be tre
Am 26.06.2017 um 08:57 schrieb Lukasz Lenart:
> 2017-06-25 8:07 GMT+02:00 i...@flyingfischer.ch :
>> I get stuck with the refactored LocalizedTextUtil:
>>
>> We had a change in 2.5.2 which disallowed the use of getText(String key)
>> in classes that cannot extend Acti
> At the moment testing locally and not online:
>
> Browser send en-US,en;q=0.5 on default
> OS linux on german locale
> changing locale in application by ?request_locale=it
> in struts.properties: struts.custom.i18n.resources=global-messages
>
> properties files:
>
> global-messages_de.properties
> I did some more tests:
>
> Test 1: in action hardcoded messages:
>
> jsmsg = new JSMessage("Show up!");
>
> On default locale: message shows up.
> Any other locale: No show up
>
> => Problem persists
>
> Test 2: in JSP hardcoded message
>
>
> notif({
>msg: "Show up!",
>
> Very strange: values do get replaced:
>
>
> notif({
> msg: "Ungültige Angaben!",
> type: "info",
> position: "center",
> opacity: 0,9,
> timeout: 5000,
> multiline: true,
> autohide: true,
> clickable: false
> });
>
>
> But JS box will still not show up, when not on default locale...
>
> ...an
Am 27.06.2017 um 08:12 schrieb Lukasz Lenart:
> 2017-06-26 21:27 GMT+02:00 i...@flyingfischer.ch :
>> Now EL brings replaces
>>
>>
>>
>> in locale en with 0.9 and in all other locales with 0,9 (note the COMMA).
> Oh... thanks a lot for diggin this, can you use
> It must be a bean create by the framework, e.g. an action, then the
> LocalizedTextProvider gets injected. If you want to use it in some
> other context you can use this approach:
>
> LocalizedTextProvider provider =
> ActionContext.getContext().getInstance(LocalizedTextProvider.class)
> LocaleP
Am 27.06.2017 um 08:42 schrieb Lukasz Lenart:
> 2017-06-27 8:38 GMT+02:00 i...@flyingfischer.ch :
>> Thanks! This works fine. And you are perfectly right:
>>
>> StringEscapeUtils.unescapeHtml4(value.replaceAll("''", "'"));
>>
&g
Sorry for all these mails. One thing more that seems to have changed:
<2.5.11 calling empty locale "?request_local=" will result in locale en,
if I am not mistaken.
2.5.11 calling empty locale "?request_local=" will result in locale
object (not null) with property languageTag null
Both versions
Am 27.06.2017 um 10:05 schrieb Lukasz Lenart:
> 2017-06-27 8:59 GMT+02:00 i...@flyingfischer.ch :
>> For the time being, it really can't be shorter than this?:
>>
>> final LocaleProviderFactory factory =
>> ActionContext.getContext().getInst
> Right... switching to LocaleUtils from commons wasn't that easy as I
> thought ;-) Can you register a ticket in JIRA and I will fix that :)
>
>
> Regards
Thanks Łukasz, for your ongoing great work! :-)
Markus
-
To unsubscribe
No big deal and probably not related to 2.5.11. Is this on purpose:
redirectAction behaves differently depending on the name of the result.
login
${myParam}
Called in action as: return "redirectToLogin";
=> myParam gets transmitted as expected.
> This may have other reasons. Is there a value for myParam in every case?
> What have you configured for struts.url.includeParams?
>
>
> Regards,
> Christoph
>
> This Email was scanned by Sophos Anti Virus
>
You are right! It's been an issue with myParam and not the architecture.
Shame...
It wo
Am 05.07.2017 um 13:23 schrieb Lukasz Lenart:
> This is very strange ... I don't understand where is the problem :\ Do
> you serve those CSSs files via the Strust filter as a static content?
>
The CSS file seems to get through. The Layout is as should. The CSS file
is packed in a subdirectory of W
0 Lukasz Lenart :
>> I was able confirm this somehow ... but I need your exact setup, what
>> version of Bootstrap do you use? Do you use FontAwesome directly?
>>
>> There is no issue when I used a pure reference to FontAwesome (with
>> their CDN) but it doesn't work when us
Works like a charm!
Thank a lot!
Markus
Am 06.07.2017 um 11:28 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report back any problems. I'll call for vote in few days if no
> problems will be spotted.
>
> Staging Maven repo
> https://r
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Already in production and working great!
Markus
Am 11.07.2017 um 09:10 schrieb Lukasz Lenart:
> The Apache Struts 2.5.12 test build is now available. With this
> release the following security vulnerabilities were addressed
Am 18.07.2017 um 07:54 schrieb Lukasz Lenart:
> Hi,
>
> There is a few issues registered that pop up after releasing 2.5.12, I
> would like to fix them and push out an another version of 2.5.x
> branch.
>
> https://issues.apache.org/jira/projects/WW/versions/12341116
>
>
> Regards
I didn't want to
On Unix try to add something like:
struts.multipart.saveDir=/tmp
Markus
Am 08.08.2017 um 19:26 schrieb Deborah White:
> Thank you, got it. :) One more question. Do you know why I am seeing this
> since migrating?
>
> Unable to find 'struts.multipart.saveDir' property setting. Defaulting to
>
Am 25.08.2017 um 11:53 schrieb Lukasz Lenart:
> Thanks Yasser!
>
> Anyone else having problems with this build?
>
>
> Regards
Seems to run fine.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional co
Am 04.09.2017 um 12:07 schrieb Lukasz Lenart:
>
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Works already perfect in production.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache
Am 21.10.2017 um 14:51 schrieb Yasser Zamani:
> With thanks to Struts good design, fortunately, it was not as hard as I
> thought and I almost finished :)
>
> Just one blocking problem :( Currently Struts is on servlet-api 2.4. I
> remember Struts 2.6 will have servlet 2.5. And so so ... As I nee
[X] General Availability (GA)
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
+1 nb
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
1++
commons-beanutils-1.9.3.jar works here in production since ages.
Markus
Am 24.06.2018 um 11:37 schrieb Greg Huber:
> Should we bump commons-beanutils-1.8.0.jar to the latest 1.9.3?
>
> struts2-tiles-plugin
>
> Cheers Greg
>
---
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Works fine here. Already in production.
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@strut
No further issues discovered here.
Good to go.
Thanks for your sustaining and continuing work!
Markus
Am 17.09.2018 um 08:06 schrieb Lukasz Lenart:
> Hi,
>
> I think we are ready to release two new releases, 2.3.36 and 2.5.18:
> - 2.3.36 is going to fix an issue with using ArrayList (backed up
Seems to run fine here.
Thanks!
Markus
Am 26.09.2018 um 11:50 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report back any problems. I'll call for a vote in a week if no
> problems will be spotted.
>
> Staging Maven repo
> https://re
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[X] General Availability (GA)
Thanks!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
+1
Markus
Am 11.01.19 um 21:35 schrieb Aleksandr Mashchenko:
> We discussed it before but it was quite some time ago. How about
> upgrading to jdk8 in 2.6 version?
>
> - Java versions are now released more frequently
> - 2.5.x will still be on jdk7
> - Currently custom converters must be created
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
>
Markus
Do not know if this is by intention:
The release notes state many library updates, and also
commons-collections4 4.1 -> 4.2
https://issues.apache.org/jira/browse/WW-4978
However, the standalone distribu
Possibly in this section?:
https://github.com/rapid7/metasploit-framework/issues/8064
Am 20.01.19 um 13:02 schrieb Greg Huber:
> Any ideas?
>
> 14.98.162.41 - - [18/Jan/2019:18:13:32 +] "POST
> /%25%7b(%23dm%3d%40ognl.OgnlContext%40DEFAULT_MEMBER_ACCESS).(%23_memberAccess%3f(%23_memberAccess%
Just stumbled over:
https://scan.coverity.com/projects/apache-struts-2
Could this be of interest?
Best
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.o
Seems to me not to be the right place to correct any possible problems,
and far off any related root of a possible issue.
The config would definitively need an option to be disabled totally. I
expect very unexpected and hard to trace side effects, depending on the
application in place.
Markus
Am
Dear Yasser
we definitively need an option to totally disable this "feature". It
really depends on what kind of application you deploy.
Logging a warning seems appropriate. But we should avoid logging a
warning while the "feature" is disabled.
I also fear that this will lead to vulnerable applic
Dear Yasser
I perfectly understood that the proposed change is proactive and that
there are no open known vulnerabilities. ;-)
Best regards
Markus
Am 16.09.19 um 15:42 schrieb Yasser Zamani:
>> -Original Message-
>> From: i...@flyingfischer.ch
>> Sent: Monday, Septe
See new errors like this:
Caused by: java.lang.SecurityException: This expression exceeded maximum
allowed length:..
followed by a longer OGNL expression in JSP.
Markus
Am 07.11.19 um 20:57 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
>
It is reported in WARN level:
WARN com.opensymphony.xwork2.ognl.OgnlValueStack - Could not evaluate
this expression due to security constraints:
Markus
Am 07.11.19 um 23:12 schrieb i...@flyingfischer.ch:
> See new errors like this:
>
> Caused by: java.lang.SecurityException: This e
eply to the dev list to let us know if that helps or not.
>
> Thanks,
>
> James.
>
>> It is reported in WARN level:
>>
>> WARN com.opensymphony.xwork2.ognl.OgnlValueStack - Could not evaluate
>> this expression due to security constraints:
>>
>> Mar
e few) Could you please share one of
> them with us? (Does that one look rational? Is it easily readable and
> maintainable? If not, isn't it better to move that logic into your
> action and just use maintainable?).
>
> Please see inline...
>
> On 11/8/2019 9:43 AM, i...
(as per Markus' comments), with
>> individual
>> applications still able to set a limit, should they wish to do so via
>> configuration.
>>
>> For 2.6 maybe a lower value for a default (such as Łukasz' suggestion of 256)
>> would be OK, provided it is a clearl
Hello
I am running 2.5.21 in production in several projects. Everything is
running fine and smooth. No issues so far.
Markus
Am 18.11.19 um 02:30 schrieb J C:
> Hello.
>
> Did some testing of the showcase and rest-showcase applications in the 2.5.21
> test build (and a very quick test of the 2.
Seems to run fine too.
Thanks!
Markus
Am 17.11.19 um 20:42 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report any problems. I'll call for a vote in a few days if no problems
> will be spotted.
>
> Staging Maven repo
> https://repositor
Am 26.11.19 um 09:32 schrieb Lukasz Lenart:
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
Works perfect in production. Thanks for your good work!
Markus
-
To unsubscribe, e-mail: dev-unsubscr..
I second NOT dropping XML configuration support.
Best
Markus
Am 08.07.20 um 09:19 schrieb Lukasz Lenart:
> wt., 7 lip 2020 o 16:37 Yasser Zamani napisał(a):
>> Yes it's awesome and I've also been thought for long time to add boot
>> and auto-config (because I've seen people have concerns about S
Seems to run fine here.
Thank for you steady good work!
Best regards
Markus
PS: maybe to consider for an upcoming release: there are some newer
version of used librarires which do work fine in Struts2, as
commons-collections4-4.4
commons-io-2.7
commons-lang3-3.11 (would need to check, if common
couple of days, since this is a dynamic situation. So we
may leave this very well up to individual responsibility to do so.
Best
Markus
Am 19.08.20 um 08:52 schrieb Lukasz Lenart:
> wt., 18 sie 2020 o 10:27 i...@flyingfischer.ch
> napisał(a):
>> PS: maybe to consider for an upcoming re
Absolutely!
Best regards
Markus
Am 26.08.20 um 08:46 schrieb Lukasz Lenart:
> Can we assume a silence consensus here?
>
> http://community.apache.org/committers/lazyConsensus.html
> https://www.apache.org/foundation/voting.html#LazyConsensus
>
> Regards
-
Am 24.09.20 um 07:07 schrieb Lukasz Lenart
> [ ] Leave at test build
> [ ] Alpha
> [ ] Beta
> [X] General Availability (GA)
>
Thanks!
Markus
-
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-m
Seems to work fine here.
Markus
Am 21.11.20 um 09:02 schrieb Lukasz Lenart:
> Hi,
>
> Please take a time and test the bits - any help is appreciated. Please
> report any problems. I'll call for a vote in a few days if no problems
> will be spotted.
>
> Staging Maven repo
> https://repository.ap
I did take a look at
https://github.com/apache/struts/pull/483
https://github.com/apache/struts/pull/496
This seems to me too big of a change for the current 2.5 branch. It
should be reconsidered or reevaluated eventually for an upcoming 2.6
branch. It also seems sensible to me to have a user-
+1
Am 20.09.21 um 15:59 schrieb Dave Newton:
+1
On Mon, Sep 20, 2021 at 1:25 AM Lukasz Lenart
wrote:
Hi,
I would like to release the last 2.5.x version and focus on Struts
2.6. All the PRs that are targeting Struts 2.5.x should be re-targeted
to Struts 2.6 (the master branch) and we should
[X] General Availability (GA)
Works fine in production since some days. Thanks!
Markus
Am 30.03.22 um 11:39 schrieb Lukasz Lenart:
[ ] Leave at test build
[ ] Alpha
[ ] Beta
[ ] General Availability (GA)
Everyone who has tested the build is invited to vote. Votes by PMC
members are consid
You may use this in Struts.xml
You need to find you longest OGNL value, discipline yourself to shorten
those, rethink you variable name length or disable this completly
Not that much of a convincing approach to improve security, but maybe
better than not. I did not like it at all, but
Besides incrementing or disabling this arbitrary limit with
You may also work with a most ugly hack by defining a variable in your jsp
and then use this very short variables in your too long OGNL expression.
Ugly, does add to code complexity and increases the overall failure
rate.But may h
I use all the jars below, except tiles-request-servlet-1.0.7.jar.
However that may be an outlier here.
It seems all the jars are needed.
Best regards
Markus
Am 08.08.22 um 20:43 schrieb Greg Huber:
Sounds like a good idea, maybe add the required code to our plugin?
...I have had a look at wh
1 - 100 of 143 matches
Mail list logo
