[jira] [Created] (WW-5345) Implement strict exclusion list which matches against subclasses

2023-09-10 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5345: --- Summary: Implement strict exclusion list which matches against subclasses Key: WW-5345 URL: https://issues.apache.org/jira/browse/WW-5345 Project: Struts 2

[jira] [Updated] (WW-5343) Make SecurityMemberAccess extensible

2023-08-31 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5343: Summary: Make SecurityMemberAccess extensible (was: Make SecurityMemberAccess entensible) >

[jira] [Created] (WW-5343) Make SecurityMemberAccess entensible

2023-08-31 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5343: --- Summary: Make SecurityMemberAccess entensible Key: WW-5343 URL: https://issues.apache.org/jira/browse/WW-5343 Project: Struts 2 Issue Type:

[jira] [Commented] (WW-5339) Mitigate against custom class ASTMap node construction

2023-08-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17760274#comment-17760274 ] Kusal Kithul-Godage commented on WW-5339: - I created a test PR for this here:

[jira] [Closed] (WW-5339) Mitigate against custom class ASTMap node construction

2023-08-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5339. --- Resolution: Invalid > Mitigate against custom class ASTMap node construction >

[jira] [Created] (WW-5355) Use LRU cache by default

2023-10-13 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5355: --- Summary: Use LRU cache by default Key: WW-5355 URL: https://issues.apache.org/jira/browse/WW-5355 Project: Struts 2 Issue Type: Improvement

[jira] [Updated] (WW-5353) Implement stronger security defaults in Struts 7.0

2023-10-13 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5353: Description: {{struts.ognl.allowStaticFieldAccess=false}} {{struts.ognl.excludedNodeTypes=}}

[jira] [Closed] (WW-5355) Integrate and use WTLFU cache by default

2023-11-03 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5355?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5355. --- Resolution: Fixed > Integrate and use WTLFU cache by default >

[jira] [Closed] (WW-5354) Add actionErrors, actionMessages, fieldErrors to parameter excluded patterns

2023-11-03 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5354?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5354. --- Resolution: Fixed > Add actionErrors, actionMessages, fieldErrors to parameter excluded

[jira] [Closed] (WW-5349) Remove core dependency on ognl.ASTVarRef

2023-11-03 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5349. --- Resolution: Fixed > Remove core dependency on ognl.ASTVarRef >

[jira] [Closed] (WW-5358) Expand exclusion list

2023-11-03 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5358?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5358. --- Resolution: Fixed > Expand exclusion list > - > > Key:

[jira] [Updated] (WW-5343) Make SecurityMemberAccess extensible and a prototype bean

2023-11-05 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5343: Summary: Make SecurityMemberAccess extensible and a prototype bean (was: Make

[jira] [Created] (WW-5358) Expand exclusion list

2023-10-24 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5358: --- Summary: Expand exclusion list Key: WW-5358 URL: https://issues.apache.org/jira/browse/WW-5358 Project: Struts 2 Issue Type: Improvement

[jira] [Created] (WW-5348) Allow overriding of logging behaviour in DefaultAcceptedPatternsChecker

2023-09-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5348: --- Summary: Allow overriding of logging behaviour in DefaultAcceptedPatternsChecker Key: WW-5348 URL: https://issues.apache.org/jira/browse/WW-5348 Project:

[jira] [Created] (WW-5349) Remove core dependency on ognl.ASTVarRef

2023-10-08 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5349: --- Summary: Remove core dependency on ognl.ASTVarRef Key: WW-5349 URL: https://issues.apache.org/jira/browse/WW-5349 Project: Struts 2 Issue Type:

[jira] [Created] (WW-5351) Add configuration option for max traversal depth when injecting parameters

2023-10-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5351: --- Summary: Add configuration option for max traversal depth when injecting parameters Key: WW-5351 URL: https://issues.apache.org/jira/browse/WW-5351 Project:

[jira] [Updated] (WW-5351) Add configuration option for max traversal depth when injecting parameters

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5351: Component/s: Core Core Interceptors > Add configuration option for max

[jira] [Created] (WW-5352) Implement annotation mechanism for injectable fields via parameters

2023-10-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5352: --- Summary: Implement annotation mechanism for injectable fields via parameters Key: WW-5352 URL: https://issues.apache.org/jira/browse/WW-5352 Project: Struts 2

[jira] [Updated] (WW-5354) Add actionErrors, actionMessages, fieldErrors to parameter excluded patterns

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5354?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5354: Summary: Add actionErrors, actionMessages, fieldErrors to parameter excluded patterns (was:

[jira] [Created] (WW-5350) Implement optional strict class/package allowlist for OGNL

2023-10-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5350: --- Summary: Implement optional strict class/package allowlist for OGNL Key: WW-5350 URL: https://issues.apache.org/jira/browse/WW-5350 Project: Struts 2

[jira] [Commented] (WW-5345) Implement strict exclusion list which matches against subclasses

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5345?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17774354#comment-17774354 ] Kusal Kithul-Godage commented on WW-5345: - Might close this in favour of WW-5350 > Implement strict

[jira] [Created] (WW-5354) Add actionErrors and actionMessages to parameter excluded patterns

2023-10-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5354: --- Summary: Add actionErrors and actionMessages to parameter excluded patterns Key: WW-5354 URL: https://issues.apache.org/jira/browse/WW-5354 Project: Struts 2

[jira] [Updated] (WW-5353) Implement stronger security defaults in Struts 7.0

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5353: Description: {{struts.ognl.allowStaticFieldAccess=false}} {{struts.ognl.excludedNodeTypes=}}

[jira] [Updated] (WW-5352) Implement annotation mechanism for injectable fields via parameters

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5352?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5352: Description: struts.parameters.requireAnnotations   Require an explicit annotation

[jira] [Updated] (WW-5351) Add configuration option for max traversal depth when injecting parameters

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5351?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5351: Description: struts.parameters.maxTraversalDepth (was: struts.parameters.maxInjectionDepth)

[jira] [Created] (WW-5353) Implement stronger security defaults in Struts 7.0

2023-10-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5353: --- Summary: Implement stronger security defaults in Struts 7.0 Key: WW-5353 URL: https://issues.apache.org/jira/browse/WW-5353 Project: Struts 2 Issue

[jira] [Updated] (WW-5353) Implement stronger security defaults in Struts 7.0

2023-10-12 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5353?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5353: Description: {{struts.ognl.allowStaticFieldAccess=false}}

[jira] [Created] (WW-5356) Refactor cache implementations to use extension point

2023-10-18 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5356: --- Summary: Refactor cache implementations to use extension point Key: WW-5356 URL: https://issues.apache.org/jira/browse/WW-5356 Project: Struts 2 Issue

[jira] [Updated] (WW-5355) Integrate and use WTLFU cache by default

2023-10-18 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5355?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5355: Summary: Integrate and use WTLFU cache by default (was: Use LRU cache by default) >

[jira] [Created] (WW-5337) Improve performance of excluded classes and packages

2023-08-21 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5337: --- Summary: Improve performance of excluded classes and packages Key: WW-5337 URL: https://issues.apache.org/jira/browse/WW-5337 Project: Struts 2 Issue

[jira] [Created] (WW-5336) Merge OgnlTool class into StrutsUtil class

2023-08-21 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5336: --- Summary: Merge OgnlTool class into StrutsUtil class Key: WW-5336 URL: https://issues.apache.org/jira/browse/WW-5336 Project: Struts 2 Issue Type:

[jira] [Commented] (WW-5334) Misc VelocityManager code cleanup

2023-08-21 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5334?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17757173#comment-17757173 ] Kusal Kithul-Godage commented on WW-5334: - [~lukaszlenart] Didn't realise 6.3.0 was still under

[jira] [Created] (WW-5332) Validate excluded package name list for missing commas

2023-08-16 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5332: --- Summary: Validate excluded package name list for missing commas Key: WW-5332 URL: https://issues.apache.org/jira/browse/WW-5332 Project: Struts 2

[jira] [Created] (WW-5334) Misc VelocityManager code cleanup

2023-08-17 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5334: --- Summary: Misc VelocityManager code cleanup Key: WW-5334 URL: https://issues.apache.org/jira/browse/WW-5334 Project: Struts 2 Issue Type: Improvement

[jira] [Updated] (WW-5332) Validate excluded package name list for missing commas

2023-08-17 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5332: Component/s: Core > Validate excluded package name list for missing commas >

[jira] [Created] (WW-5341) Ensure exclusion list applies to objects from all ClassLoaders

2023-08-29 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5341: --- Summary: Ensure exclusion list applies to objects from all ClassLoaders Key: WW-5341 URL: https://issues.apache.org/jira/browse/WW-5341 Project: Struts 2

[jira] [Created] (WW-5342) Block classes in default package

2023-08-29 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5342: --- Summary: Block classes in default package Key: WW-5342 URL: https://issues.apache.org/jira/browse/WW-5342 Project: Struts 2 Issue Type: Improvement

[jira] [Closed] (WW-5337) Improve performance of excluded classes and packages

2023-08-21 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5337?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage closed WW-5337. --- Resolution: Fixed > Improve performance of excluded classes and packages >

[jira] [Updated] (WW-5337) Improve performance of excluded classes and packages

2023-08-21 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5337?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5337: Description: By using a HashSet#contains we can significantly improve performance for

[jira] [Reopened] (WW-5337) Improve performance of excluded classes and packages

2023-08-21 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5337?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage reopened WW-5337: - > Improve performance of excluded classes and packages >

[jira] [Resolved] (WW-5337) Improve performance of excluded classes and packages

2023-08-21 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5337?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage resolved WW-5337. - Resolution: Fixed > Improve performance of excluded classes and packages >

[jira] [Created] (WW-5339) Mitigate against custom class ASTMap node construction

2023-08-22 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5339: --- Summary: Mitigate against custom class ASTMap node construction Key: WW-5339 URL: https://issues.apache.org/jira/browse/WW-5339 Project: Struts 2

[jira] [Created] (WW-5340) Introduce optional AST node exclusion list

2023-08-22 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5340: --- Summary: Introduce optional AST node exclusion list Key: WW-5340 URL: https://issues.apache.org/jira/browse/WW-5340 Project: Struts 2 Issue Type:

[jira] [Updated] (WW-5339) Mitigate against custom class ASTMap node construction

2023-08-22 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5339: Description: i.e. {{@@{}}} syntax > Mitigate against custom class ASTMap node construction >

[jira] [Updated] (WW-5339) Mitigate against custom class ASTMap node construction

2023-08-22 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5339?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5339: Description: i.e. @@{} syntax (was: i.e. {{@@{}}} syntax) > Mitigate against custom class

[jira] [Updated] (WW-5340) Introduce optional AST node exclusion list

2023-08-22 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5340: Description: Enhance security by implementing an optional exclusion list (in struts.xml)

[jira] [Updated] (WW-5363) Look up Stack last in Velocity context

2023-11-13 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5363?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5363: Component/s: Plugin - Velocity Fix Version/s: 6.4.0 Affects Version/s: 6.3.0

[jira] [Created] (WW-5363) Look up Stack last in Velocity context

2023-11-13 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5363: --- Summary: Look up Stack last in Velocity context Key: WW-5363 URL: https://issues.apache.org/jira/browse/WW-5363 Project: Struts 2 Issue Type:

[jira] [Created] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5268: --- Summary: Add configuration option to exempt classes from OGNL package exclusions Key: WW-5268 URL: https://issues.apache.org/jira/browse/WW-5268 Project:

[jira] [Created] (WW-5266) Add configuration option for a per-file max size for multipart requests

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5266: --- Summary: Add configuration option for a per-file max size for multipart requests Key: WW-5266 URL: https://issues.apache.org/jira/browse/WW-5266 Project:

[jira] [Created] (WW-5267) Add configuration option to generate ActionContext even for excluded urls

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5267: --- Summary: Add configuration option to generate ActionContext even for excluded urls Key: WW-5267 URL: https://issues.apache.org/jira/browse/WW-5267 Project:

[jira] [Created] (WW-5265) Allow removal of a single/specific container provider

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5265: --- Summary: Allow removal of a single/specific container provider Key: WW-5265 URL: https://issues.apache.org/jira/browse/WW-5265 Project: Struts 2

[jira] [Created] (WW-5270) Forwarding from a Struts excluded URL to an Action not working

2022-12-18 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5270: --- Summary: Forwarding from a Struts excluded URL to an Action not working Key: WW-5270 URL: https://issues.apache.org/jira/browse/WW-5270 Project: Struts 2

[jira] [Updated] (WW-5270) Forwarding from a Struts excluded URL to an Action not working

2022-12-18 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5270?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5270: Description: Since the fix implemented in WW-5199 - I noticed forwards still did not function

[jira] [Created] (WW-5278) Clean up duplicated code across ActionValidationManagers

2023-01-30 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5278: --- Summary: Clean up duplicated code across ActionValidationManagers Key: WW-5278 URL: https://issues.apache.org/jira/browse/WW-5278 Project: Struts 2

[jira] [Created] (WW-5279) Improve readability of XmlConfigurationProvider class

2023-01-30 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5279: --- Summary: Improve readability of XmlConfigurationProvider class Key: WW-5279 URL: https://issues.apache.org/jira/browse/WW-5279 Project: Struts 2 Issue

[jira] [Comment Edited] (WW-5287) Make excludedPackageNames check more stringent

2023-03-07 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17697278#comment-17697278 ] Kusal Kithul-Godage edited comment on WW-5287 at 3/7/23 8:00 AM: -

[jira] [Commented] (WW-5287) Make excludedPackageNames check more stringent

2023-03-06 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17697278#comment-17697278 ] Kusal Kithul-Godage commented on WW-5287: - [~lukaszlenart] Ohhh yeah that completely aluded me. Let

[jira] [Created] (WW-5293) Allow loading XML configuration from other than filesystem

2023-03-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5293: --- Summary: Allow loading XML configuration from other than filesystem Key: WW-5293 URL: https://issues.apache.org/jira/browse/WW-5293 Project: Struts 2

[jira] [Commented] (WW-5267) Allow SiteMesh to run on requests that are not Struts actions, but SiteMesh requires ActionContext

2023-03-07 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17697431#comment-17697431 ] Kusal Kithul-Godage commented on WW-5267: - Yep those sound like better options > Allow SiteMesh to

[jira] [Commented] (WW-5267) Allow SiteMesh to run on requests that are not Struts actions, but SiteMesh requires ActionContext

2023-03-07 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17697414#comment-17697414 ] Kusal Kithul-Godage commented on WW-5267: - As per [this

[jira] [Updated] (WW-5267) Allow SiteMesh to run on requests that are not Struts actions, but SiteMesh requires ActionContext

2023-03-07 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5267: Summary: Allow SiteMesh to run on requests that are not Struts actions, but SiteMesh requires

[jira] [Updated] (WW-5267) Allow SiteMesh to run on requests that are not Struts actions, but SiteMesh requires ActionContext

2023-03-07 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5267: Description: There are scenarios where you may want to exclude a request from Struts

[jira] [Created] (WW-5292) Allow overriding of Operations classes in two filter setup and assorted clean up

2023-03-07 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5292: --- Summary: Allow overriding of Operations classes in two filter setup and assorted clean up Key: WW-5292 URL: https://issues.apache.org/jira/browse/WW-5292

[jira] [Commented] (WW-5285) Upgrade commons-fileupload to ver 1.5 and add option to limit number of accepted files

2023-02-25 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17693590#comment-17693590 ] Kusal Kithul-Godage commented on WW-5285: - Given max file size is enforced via an interceptor, would

[jira] [Commented] (WW-5285) Upgrade commons-fileupload to ver 1.5 and add option to limit number of accepted files

2023-02-27 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694361#comment-17694361 ] Kusal Kithul-Godage commented on WW-5285: - [~lukaszlenart] Yep that was my original intention, once

[jira] [Commented] (WW-5285) Upgrade commons-fileupload to ver 1.5 and add option to limit number of accepted files

2023-02-27 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694370#comment-17694370 ] Kusal Kithul-Godage commented on WW-5285: - No problem - it's good to discuss and clarify > Upgrade

[jira] [Commented] (WW-5285) Upgrade commons-fileupload to ver 1.5 and add option to limit number of accepted files

2023-02-27 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5285?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694344#comment-17694344 ] Kusal Kithul-Godage commented on WW-5285: - [~lukaszlenart] Makes sense - so

[jira] [Commented] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2023-02-27 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694382#comment-17694382 ] Kusal Kithul-Godage commented on WW-5268: - [~lukaszlenart] Yep! Where are the source files located?

[jira] [Created] (WW-5290) Refactor ConfigurationManager

2023-03-03 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5290: --- Summary: Refactor ConfigurationManager Key: WW-5290 URL: https://issues.apache.org/jira/browse/WW-5290 Project: Struts 2 Issue Type: Improvement

[jira] [Comment Edited] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2023-02-17 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17690670#comment-17690670 ] Kusal Kithul-Godage edited comment on WW-5268 at 2/18/23 1:25 AM: --

[jira] [Commented] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2023-02-17 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17690670#comment-17690670 ] Kusal Kithul-Godage commented on WW-5268: - [~yasserzamani] [~lukaszlenart]  Upon further thought, I

[jira] [Commented] (WW-5267) Add configuration option to generate ActionContext even for excluded urls

2023-02-28 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694497#comment-17694497 ] Kusal Kithul-Godage commented on WW-5267: - Perhaps a configuration option to exclude URLs from

[jira] [Commented] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2023-02-28 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694496#comment-17694496 ] Kusal Kithul-Godage commented on WW-5268: - Done :) > Add configuration option to exempt classes

[jira] [Created] (WW-5287) Make excludedPackageNames check more stringent

2023-02-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5287: --- Summary: Make excludedPackageNames check more stringent Key: WW-5287 URL: https://issues.apache.org/jira/browse/WW-5287 Project: Struts 2 Issue Type:

[jira] [Created] (WW-5286) Allow XWork configuration reloading at any time

2023-02-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5286: --- Summary: Allow XWork configuration reloading at any time Key: WW-5286 URL: https://issues.apache.org/jira/browse/WW-5286 Project: Struts 2 Issue Type:

[jira] [Resolved] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2023-02-28 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage resolved WW-5268. - Resolution: Fixed > Add configuration option to exempt classes from OGNL package exclusions

[jira] [Commented] (WW-5286) Allow XWork configuration reloading at any time

2023-02-28 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5286?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17694773#comment-17694773 ] Kusal Kithul-Godage commented on WW-5286: - Interesting. In Confluence we are using this

[jira] [Resolved] (WW-5287) Make excludedPackageNames check more stringent

2023-03-01 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5287?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage resolved WW-5287. - Fix Version/s: (was: 7.0.0) Resolution: Won't Do > Make excludedPackageNames

[jira] [Created] (WW-5288) Make excluded package exemption logic more strict

2023-03-01 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5288: --- Summary: Make excluded package exemption logic more strict Key: WW-5288 URL: https://issues.apache.org/jira/browse/WW-5288 Project: Struts 2 Issue

[jira] [Commented] (WW-5287) Make excludedPackageNames check more stringent

2023-03-01 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17695421#comment-17695421 ] Kusal Kithul-Godage commented on WW-5287: - So I realised part of what I wrote in the initial

[jira] [Commented] (WW-5287) Make excludedPackageNames check more stringent

2023-03-01 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5287?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17695376#comment-17695376 ] Kusal Kithul-Godage commented on WW-5287: - [~lukaszlenart] Why do we have both

[jira] [Updated] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5301: Description: I'm possibly missing something here but as far as I can tell struts-plugin.xml

[jira] [Updated] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5301: Description: I'm possibly missing something here but as far as I can tell struts-plugin.xml

[jira] [Commented] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706744#comment-17706744 ] Kusal Kithul-Godage commented on WW-5301: - {{}} is not the same as {{StrutsBeanSelectionProvider}}.

[jira] [Commented] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706753#comment-17706753 ] Kusal Kithul-Godage commented on WW-5301: - Yep, I think the solution will involve deferring the

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706744#comment-17706744 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/30/23 7:37 AM: -- {{}} is

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706715#comment-17706715 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/30/23 6:30 AM: -- Changing

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706722#comment-17706722 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/30/23 6:43 AM: --

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706722#comment-17706722 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/30/23 6:43 AM: --

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706715#comment-17706715 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/30/23 6:43 AM: -- Changing

[jira] [Commented] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706722#comment-17706722 ] Kusal Kithul-Godage commented on WW-5301: - [~lukaszlenart] If the VelocityManager was registered as

[jira] [Commented] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-30 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706715#comment-17706715 ] Kusal Kithul-Godage commented on WW-5301: - Changing the ordering won't work either as then user-set

[jira] [Created] (WW-5298) Clean up StrutsVelocityContext

2023-03-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5298: --- Summary: Clean up StrutsVelocityContext Key: WW-5298 URL: https://issues.apache.org/jira/browse/WW-5298 Project: Struts 2 Issue Type: Task

[jira] [Created] (WW-5299) Clean up ActionChainResult

2023-03-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5299: --- Summary: Clean up ActionChainResult Key: WW-5299 URL: https://issues.apache.org/jira/browse/WW-5299 Project: Struts 2 Issue Type: Task

[jira] [Created] (WW-5300) Make Dispatcher methods overridable

2023-03-28 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5300: --- Summary: Make Dispatcher methods overridable Key: WW-5300 URL: https://issues.apache.org/jira/browse/WW-5300 Project: Struts 2 Issue Type: Task

[jira] [Updated] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-29 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5301: Summary: Impossible to select alternate default VelocityManager bean (was: Impossible to

[jira] [Updated] (WW-5301) Impossible to register alternate default VelocityManager bean

2023-03-29 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5301: Summary: Impossible to register alternate default VelocityManager bean (was: Impossible to

[jira] [Comment Edited] (WW-5301) Impossible to select alternate default VelocityManager bean

2023-03-29 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17706299#comment-17706299 ] Kusal Kithul-Godage edited comment on WW-5301 at 3/29/23 9:46 AM: -- Ah I

[jira] [Updated] (WW-5301) Impossible to register alternate VelocityManager bean

2023-03-29 Thread Kusal Kithul-Godage (Jira)
[ https://issues.apache.org/jira/browse/WW-5301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kusal Kithul-Godage updated WW-5301: Description: I'm possibly missing something here but as far as I can tell struts-plugin.xml

  1   2   >