[jira] [Updated] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Aleksandr Mashchenko updated WW-5004: - Priority: Critical (was: Major) > No more calling of a static variable in Struts 2.8.20

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745398#comment-16745398 ] Aleksandr Mashchenko commented on WW-5004: -- We've discovered same bug today. It is broken by this

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745517#comment-16745517 ] Aleksandr Mashchenko commented on WW-5004: -- [~lukaszlenart] {{disallowProxyMemberAccess}}  will be

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745518#comment-16745518 ] Lukasz Lenart commented on WW-5004: --- Ah, right. And yes, you are right, so maybe we should add a new flag

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745526#comment-16745526 ] Lukasz Lenart commented on WW-5004: --- No, but we can ask the author here

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745465#comment-16745465 ] Aleksandr Mashchenko commented on WW-5004: -- [~DenizR] As a workaround you can downgrade OGNL to

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745498#comment-16745498 ] Aleksandr Mashchenko commented on WW-5004: -- {\{allowStaticMethodAccess}} will work only if

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745514#comment-16745514 ] Lukasz Lenart commented on WW-5004: --- Not sure if I understand, {{disallowProxyMemberAccess}} is {{false}}

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745513#comment-16745513 ] Aleksandr Mashchenko commented on WW-5004: -- It is kind of working in 2.6 with caveat that

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745520#comment-16745520 ] Lukasz Lenart commented on WW-5004: --- I think this makes sense to check access to fields as well, we are

[jira] [Comment Edited] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745517#comment-16745517 ] Aleksandr Mashchenko edited comment on WW-5004 at 1/17/19 9:21 PM: ---

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Aleksandr Mashchenko (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745521#comment-16745521 ] Aleksandr Mashchenko commented on WW-5004: -- [~lukaszlenart] Do you have some example why it should

[jira] [Created] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread JIRA
Deniz Renkligül created WW-5004: --- Summary: No more calling of a static variable in Struts 2.8.20 available Key: WW-5004 URL: https://issues.apache.org/jira/browse/WW-5004 Project: Struts 2

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread JIRA
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744976#comment-16744976 ] Deniz Renkligül commented on WW-5004: - Sorry, no logs or error messages are shown. > No more calling of

[jira] [Updated] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart updated WW-5004: -- Fix Version/s: 2.5.21 > No more calling of a static variable in Struts 2.8.20 available >

[jira] [Updated] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart updated WW-5004: -- Fix Version/s: 2.6 > No more calling of a static variable in Struts 2.8.20 available >

[jira] [Comment Edited] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744971#comment-16744971 ] Lukasz Lenart edited comment on WW-5004 at 1/17/19 12:16 PM: - Do you see any

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744971#comment-16744971 ] Lukasz Lenart commented on WW-5004: --- Do you see any WARN in logs? Also these constants {code:xml}

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread JIRA
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744996#comment-16744996 ] Deniz Renkligül commented on WW-5004: - After the putting in struts.xml   same behavior. The error

[jira] [Comment Edited] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread JIRA
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744996#comment-16744996 ] Deniz Renkligül edited comment on WW-5004 at 1/17/19 12:31 PM: --- After the

[jira] [Commented] (WW-4348) Remove access to static methods

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-4348?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744994#comment-16744994 ] Lukasz Lenart commented on WW-4348: --- [~mwulftange] could you check with the latest 2.5.20 Struts version?

[jira] [Comment Edited] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744982#comment-16744982 ] Lukasz Lenart edited comment on WW-5004 at 1/17/19 12:23 PM: - Could you set the

[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-17 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16744982#comment-16744982 ] Lukasz Lenart commented on WW-5004: --- Could you set the below constant in struts.xml? {code:xml} {code}

[jira] [Commented] (WW-4999) Can't get OgnlValueStack log even if enable logMissingProperties

2019-01-17 Thread Quincy Qu (JIRA)
[ https://issues.apache.org/jira/browse/WW-4999?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16745702#comment-16745702 ] Quincy Qu commented on WW-4999: --- Hey Lukasz, were you able to reproduce this bug? > Can't get OgnlValueStack