[jira] [Commented] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676728#comment-13676728 ] Johno Crawford commented on WW-4094: What do you think about logging this as debug by

[jira] [Commented] (WW-4095) cleanupActionName should not compile regex every request

[ https://issues.apache.org/jira/browse/WW-4095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676731#comment-13676731 ] ASF subversion and git services commented on WW-4095: - Commit 1490165

[jira] [Resolved] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart resolved WW-4094. --- Resolution: Fixed Fix Version/s: 2.3.15 Assignee: Lukasz Lenart Changed default regexp

[jira] [Commented] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676732#comment-13676732 ] ASF subversion and git services commented on WW-4094: - Commit 1490165

[jira] [Resolved] (WW-4095) cleanupActionName should not compile regex every request

[ https://issues.apache.org/jira/browse/WW-4095?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart resolved WW-4095. --- Resolution: Fixed Assignee: Lukasz Lenart Patch applied, thanks!

[jira] [Commented] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676738#comment-13676738 ] Lukasz Lenart commented on WW-4094: --- I thought about that and 99,99% of requests should

[jira] [Commented] (WW-4090) Remote code execution via wildcard matching and double evaluation of OGNL expression

[ https://issues.apache.org/jira/browse/WW-4090?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676741#comment-13676741 ] Hudson commented on WW-4090: Integrated in Struts2-JDK6 #724 (See

[jira] [Commented] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676746#comment-13676746 ] Lukasz Lenart commented on WW-4094: --- Cool! struts.allowed.action.names

[jira] [Updated] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johno Crawford updated WW-4093: --- Attachment: javadoc_fix1.patch Javadoc of RegexFieldValidator-annotation out-dated

[jira] [Commented] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676749#comment-13676749 ] Johno Crawford commented on WW-4093: Attached patch with corrected javadoc.

[jira] [Updated] (WW-4073) Disable eval expressions and simple JSTL accessibility

[ https://issues.apache.org/jira/browse/WW-4073?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johno Crawford updated WW-4073: --- Attachment: (was: d4c4e615bee50884838f1b8f928106378afa5de2.patch) Disable eval expressions and

[jira] [Updated] (WW-4073) Disable eval expressions and simple JSTL accessibility

[ https://issues.apache.org/jira/browse/WW-4073?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johno Crawford updated WW-4073: --- Attachment: (was: bbaab4e50fefb3be092071bf43c905ff05ce0383.patch) Disable eval expressions and

[jira] [Commented] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676775#comment-13676775 ] ASF subversion and git services commented on WW-4093: - Commit 1490175

[jira] [Resolved] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rene Gielen resolved WW-4093. - Resolution: Fixed Assignee: Rene Gielen Patch applied, thamks Javadoc of

[jira] [Closed] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Rene Gielen closed WW-4093. --- Javadoc of RegexFieldValidator-annotation out-dated

[jira] [Created] (WW-4097) JavaDocs of all annotations related to validators are outdated

Lukasz Lenart created WW-4097: - Summary: JavaDocs of all annotations related to validators are outdated Key: WW-4097 URL: https://issues.apache.org/jira/browse/WW-4097 Project: Struts 2 Issue

[jira] [Created] (WW-4098) DefaultActionMapper is cleaning up correct action names

Tom Briers created WW-4098: -- Summary: DefaultActionMapper is cleaning up correct action names Key: WW-4098 URL: https://issues.apache.org/jira/browse/WW-4098 Project: Struts 2 Issue Type: Bug

[jira] [Updated] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tom Briers updated WW-4098: --- Description: With the new security release I'm seeing warning in my logs for 'correct' action names:

[jira] [Updated] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tom Briers updated WW-4098: --- Description: With the new security release I'm seeing warning in my logs for 'correct' action names:

[jira] [Updated] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Tom Briers updated WW-4098: --- Description: With the new security release I'm seeing warnings in my logs for 'correct' action names:

[jira] [Closed] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart closed WW-4098. - Resolution: Duplicate Fix Version/s: 2.3.15 Assignee: Lukasz Lenart Too late, already

[jira] [Commented] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676789#comment-13676789 ] Tom Briers commented on WW-4098: Hmm, it seems there will not be a fasttrack for this and we

[jira] [Commented] (WW-4098) DefaultActionMapper is cleaning up correct action names

[ https://issues.apache.org/jira/browse/WW-4098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676790#comment-13676790 ] Lukasz Lenart commented on WW-4098: --- I'm planning to start with 2.3.15 next week ;-)

[jira] [Commented] (WW-4093) Javadoc of RegexFieldValidator-annotation out-dated

[ https://issues.apache.org/jira/browse/WW-4093?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676800#comment-13676800 ] Hudson commented on WW-4093: Integrated in Struts2-JDK6 #725 (See

[jira] [Commented] (WW-4095) cleanupActionName should not compile regex every request

[ https://issues.apache.org/jira/browse/WW-4095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676801#comment-13676801 ] Hudson commented on WW-4095: Integrated in Struts2-JDK6 #725 (See

[jira] [Commented] (WW-4094) struts.allowed.action.names inconsistency

[ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13676802#comment-13676802 ] Hudson commented on WW-4094: Integrated in Struts2-JDK6 #725 (See

[jira] [Updated] (WW-4095) cleanupActionName should not compile regex every request

[ https://issues.apache.org/jira/browse/WW-4095?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Johno Crawford updated WW-4095: --- Description: Please find attached patch proposal, cuts execution time in half. Run time compiled