Grish wrote:
Hmmm good point. So does this mean that the only secure way of having
downloads is to have specific actions for each download? Or is there a
better approach?
I don't claim to know what the best approach is. As long as your action
does sufficient validation of the specified input
Hi,
Does Struts1 provide an example anywhere of how to use Servlet Filter to
access the struts config?
Thanks,
Paul
-Original Message-
From: Strachan, Paul [mailto:[EMAIL PROTECTED]
Sent: Friday, 27 July 2007 3:47 PM
To: user@struts.apache.org
Subject: [s1] security filter for EventDi
Isn't it closed with the /> in the end?
I just copied the examples in the tutorials and url examples:
http://struts.apache.org/2.x/docs/url.html
nuwan chandrasoma-2 wrote:
>
> Hi,
>
> Is it a typo, I dont see a tag in ur code?
>
> Thanks,
>
> Nuwan
>
> Grish wrote:
>> I studied the stru
Hmmm good point. So does this mean that the only secure way of having
downloads is to have specific actions for each download? Or is there a
better approach?
DNewfield wrote:
>
> Grish wrote:
>> I studied the struts showcase sample of file downloading. I wanted to do
>> something similar but in
Hi,
This question can be termed as an OT as it is related to regex. I have a
validation criteria which says:
a number cannot start with "000" which is 9 digits in length.
Can somebody help me in writing a regular expression for this?
Thank you
So, what's stopping you from adding the tutorial to the Struts 2 docs
and updating the archetype? :)
Don
On 8/1/07, Nils-Helge Garli <[EMAIL PROTECTED]> wrote:
> I think I've managed to get all the steps written down:
> http://portletwork.blogspot.com/2007/07/mvnjetty-and-portlets.html
>
> Also,
Musachy Barroso wrote:
If there was a way of doing that, wouldn't it defeat the protection?
Probably, but I was hoping someone might suggest a way that it didn't.
Another thing, does the HDIV plugin have this already?
Not really--it doesn't prevent the request from being made or acted
upon
If there was a way of doing that, wouldn't it defeat the protection?
Another thing, does the HDIV plugin have this already?
musachy
On 7/31/07, Dale Newfield <[EMAIL PROTECTED]> wrote:
> One incredibly annoying side effect of a solution like this:
> Let's say you've got an active session for a we
One incredibly annoying side effect of a solution like this:
Let's say you've got an active session for a web-app, and want to follow
a link to this same app either from another web site or from an email
client: The new request won't have the appropriate token, and thus will
not be able to con
People:
this is the scenary:
I'm using .
I pick one option with a mouse click in the optionlist.
The id is modified!
then i focus the textbox and add charaters.
The id should be nullified, but it doen't happen.
Any ideas?
Nickar
When the "javascript hijacking" problem was discussed back in April, I
added a mechanism to prevent private information from being fetched from
a json action without an additional authenticationToken, which should
protect against another site slurping non-public information from mine
just by vi
Since it works for the form, but not the wildcard action mapping, it
might be an issue with the action mapper. Try using a non-wildcard
mapping to see if it makes a difference.
/Ian
JBL wrote:
We have a link to a Struts 2 action that includes a URL parameter
(.../something_method.action?name
JBL wrote:
We have a link to a Struts 2 action that includes a URL parameter
(.../something_method.action?name=NAME), and the URL parameter is getting
lost -- it doesn't show up in the action, the request map (when we implement
RequestAware), the parameter map (when we implement ParameterAware),
I think I've managed to get all the steps written down:
http://portletwork.blogspot.com/2007/07/mvnjetty-and-portlets.html
Also, I took a struts 2 portlet archetype project and added the
necessary files and configurations and put it on my site for download.
You can find the link in the blog.
Plea
We have a link to a Struts 2 action that includes a URL parameter
(.../something_method.action?name=NAME), and the URL parameter is getting
lost -- it doesn't show up in the action, the request map (when we implement
RequestAware), the parameter map (when we implement ParameterAware), or a
custom
setecastronomy wrote:
Hello, I'm moving the first steps with S2.
I'm going to build a form with many input components. Some of them should be
disabled or hidden based upon the selection of a radio button. In a pure jsp
scenario where html tags are used I can link some javascript function which
us
Session A Mwamufiya wrote:
- I have the following line in my tag:
This probably is part of the problem--this url should be relative to the
webapp, something like:
"/> (where "/styles/render.css" is the path
from the root of your webapp to the file in question.)
Any ideas why struts do
Hi,
I have a page with various strut objects in a form (buttons, textfields, and
listboxes), and would like to be able to control the layout. I tried using a
css file to set the size and font of buttons:
- my jsp page contains:
- I have the following line in my tag:
- my rende
If I want to replace a value in a properties file with a new value, can
I do this? It looks like I need to instead have a base file with time
placeholders for the values that I want to replace with my real genned
values. It is very possible that I missed an easier way to accomplish this.
Din
It's because now your login page is considered a secure page and it's
not allowing you to display it. Try changing your filters to:
FiltroFilterChainProxy
*.do
FiltroFilterChainProxy
/j_acegi_securit
Thanks, but not working yet; when invoking the page
http://localhost:8080/login_demo/ the same error appear time after time, even
trying to invoke directly the page
http://localhost:8080/login_demo/userLogin.jsp shows the same error.these are
the settings right now:#web.xml
Chris is correct. Acegi has nothing to do with Struts. It's a special URI
that Acegi looks for. Just map your filter to /*
On 7/31/07, Chris Pratt <[EMAIL PROTECTED]> wrote:
>
> >
> > FiltroFilterChainProxy
> > *.do
> >
>
> You have the Acegi Filte
Note that the warning about 'faces-config.xml null or empty' is a) just
a warning -- it's not an error; and b) is just telling you that you
don't have a default locale configured in your faces-config.xml -- which
is normal if you haven't deployed one.
The real problem is elsewhere. You'll need
Grish wrote:
I studied the struts showcase sample of file downloading. I wanted to do
something similar but instead of setting the inputPath paremeter in
struts.xml I wanted to pass it in the url.
Sounds like you're opening a very large security hole here...
-Dale
Joe Yuen wrote:
I am running into a situation where once a user has checked a box and has
submitted the form, there is now no way to uncheck the box. What is the proper
way to handle this situation?
I assume you are using Struts 1 and the html:checkbox tag? In that case,
the solution is as
Thorsten Schäfer wrote:
I'm currently taking a look at Struts 2 and I particularly like getting
rid of ActionForms. As I understand, WebWorks/Struts2 offers two ways to
map forms to business domain objects:
1. I can provide a getter method (getDomainObject()) in the action and
refer to its proper
钟原froast wrote:
image/png,image/gif,image/jpeg
102400
*
saveCertificate
the upload file is not nessary, so i want it to be validated when I upload a
file, and skip validation when I did not upload a file, how should I do?
H
yeah I know. I have been fixing them on code as I find them, if you
guys report them here I will take care of them
thanks
musachy
On 7/31/07, Dave Newton <[EMAIL PROTECTED]> wrote:
> To followup myself:
>
> The samples in question are always code snippets,
> being displayed as-is from the JavaDoc
To followup myself:
The samples in question are always code snippets,
being displayed as-is from the JavaDocs... The
JavaDocs of the classes use entities, so they're
displayed as such.
:/
I like the idea of snippets and all, but it's pretty
frustrating when you can't change 'em :)
--- Dave Newt
Hi,
They are both possible. Take a look at
http://jscontrolstags.sourceforge.net/controls/treeview/treeview.html
Don't ask me for a tutorial or complete example on trees, because I've
struggled to get that information for the past 2 days. I may end up writing a
tutorial once I'm done with my
--- Musachy Barroso <[EMAIL PROTECTED]> wrote:
> On what page are you having problems?
It's on a *lot* of them... and it is kinda annoying; I
think I've brought this up before.
d.
>
> musachy
>
> On 7/31/07, Jasper Floor <[EMAIL PROTECTED]>
> wrote:
> > Hi,
> >
> > I'm having a slight problem
>
> FiltroFilterChainProxy
> *.do
>
You have the Acegi Filter mapped to *.do, so it's not going to be
called when the request for j_acegi_security_check comes in. It's
being passed straight on to struts, and since you don't have an action
mapped t
Is it possible to add a checkbox to each node of the Tree?
Is it possible to add a different icon for each node of the tree?
Perhaps something similar to the Display Tag table decorator?
Thank you,
Rich
-
To unsubscribe, e-mai
On what page are you having problems?
musachy
On 7/31/07, Jasper Floor <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I'm having a slight problem with the taglib documentation. The
> descriptions display the markup tags instead of doing them. This makes
> it really annoying to read. .I get this in firefox
Hi,
I'm having a slight problem with the taglib documentation. The
descriptions display the markup tags instead of doing them. This makes
it really annoying to read. .I get this in firefox and IE. I was
wondering if I was the onyl one?
-
I am testing show-case jsf plugin in my project: I copy java files and jsp
files and struts-jsf files as what the showcase does, and I also add jsf
sevlet in web.xml, but there came the error when I deploy the war: it still
searches for the face-config.xml, but in the showcase, there is no
face-co
I am testing show-case jsf plugin in my project: I copy java files and jsp
files and struts-jsf files as what the showcase does, and I also add jsf
sevlet in web.xml, but there came the error when I deploy the war: it still
searches for the face-config.xml, but in the showcase, there is no
face-co
Not working yet :-(> Date: Tue, 31 Jul 2007 09:46:44 -0500> From: [EMAIL
PROTECTED]> To: user@struts.apache.org> Subject: Re: Struts+Acegi not working>
> Remove the .do from the /j_acegi_security_check
_
Play free games, earn ticket
As the show-case shows, the action name maps to the jsf page name, for
instance, if action name is "list", the according jsf name is "list.jsp"
under the package /jsf/employee.
list.action
list.action
But I am not sure if my und
Remove the .do from the /j_acegi_security_check
Hi,
I'm building a web application build with Struts+Spring+Acegi, I'm building the
login page but I'm getting the next error:
javax.servlet.ServletException: Cannot retrieve mapping for action
/j_acegi_security_check
org.apache.jasper.runtime.PageContextImpl.doHandle
PageException
Well, I guess that's that then... dhtmlx components are currently under
GPL2. Shame, they're really excellent implementations.
Frank
--
Frank W. Zammetti
Founder and Chief Software Architect
Omnytex Technologies
http://www.omnytex.com
AIM/Yahoo: fzammetti
MSN: [EMAIL PROTECTED]
Author of "Prac
Thanks George. I am looking into that now and it appears to be what I
need. I just need to work out the little details of what to replace,
and probably in what file so that I can easily get it ready by my S2 app.
Dinwiddie, George wrote:
What are you using to build your app? The Ant "repla
Hello, I'm moving the first steps with S2.
I'm going to build a form with many input components. Some of them should be
disabled or hidden based upon the selection of a radio button. In a pure jsp
scenario where html tags are used I can link some javascript function which
uses style.display = 'non
Whatever it is, it's cool :)
musachy
On 7/31/07, James Holmes <[EMAIL PROTECTED]> wrote:
> Anyone know what Matt is using for AppFuse.org?
>
> Is that the type of menu people would like to see?
>
> James
>
>
> On Tue Jul 31 9:10 , James Holmes <[EMAIL PROTECTED]> sent:
>
> >I'm looking into upda
Anyone know what Matt is using for AppFuse.org?
Is that the type of menu people would like to see?
James
On Tue Jul 31 9:10 , James Holmes <[EMAIL PROTECTED]> sent:
>I'm looking into updating the Struts 2 Showcase application with a new menuing
>system so that it is easier to use. Anyone have
--- "Frank W. Zammetti" <[EMAIL PROTECTED]> wrote:
> so there's the question: is the GPL compatible with
> the ASL?
Which versions?
GPL < v3 is definitely *not* compatible w/ (AFAICT,
anyway) any ASL; I'm not familiar with v3 yet. My
*impression* is that v3 is not ASLv2 compatible,
but... bette
Or add to the docs already on the wiki.
http://struts.apache.org/2.x/docs/tree.html
d.
--- Session A Mwamufiya <[EMAIL PROTECTED]>
wrote:
> You have a very valid point, and I will get to it in
> 2 weeks' time, once I'm done with my program
> assignments. It surely was an experience to go
> thr
What are you using to build your app? The Ant "replace" task can be
used for such a thing. See also, "tstamp" for creating the value to
insert.
George Dinwiddie, iDIA Computing, LLC
http://iDIAcomputing.com/
http://blog.gdinwiddie.com/
-Original Message-
From: Skip Hollowell [mailto
The single best set of web UI components I've found to date is here:
http://scbr.com/docs/products.shtml
It includes a menu, tabbar (the single best implementation ever IMO),
treeview, grid, toolbar, and others. The dhtmlx* components are
well-documented, easy to use, lightweight, feature-ric
DISCLAIMER:
---
The contents of this e-mail and any attachment(s) are confidential and intended
for the named recipient(s) only.
It shall not attach any liability on the origi
Having breadcrumbs would be nice, the "go back to X" link at the
bottom of the pages always seemed a little bit confusing to me.
musachy
On 7/31/07, James Holmes <[EMAIL PROTECTED]> wrote:
> I'm looking into updating the Struts 2 Showcase application with a new menuing
> system so that it is eas
I'm looking into updating the Struts 2 Showcase application with a new menuing
system so that it is easier to use. Anyone have any recommendations on existing
CSS / JavaScript libraries? The library will need to be open source and have a
license that is "compatible" with Struts 2.
I'd like to hear
I am not sure if this is technically an S2 or even Struts specific
question, but is there a programmatic way to insert the build date of my
webapp into a file? In my case I just have a little mouseover on the
application's logo, and that lets you know what version and hopefully
build time you
That's weird as it seems to work for me (but I'm using svn head anyway)
musachy
On 7/31/07, Sandro Giessl <[EMAIL PROTECTED]> wrote:
> On Monday 30 July 2007 19:12:45 Musachy Barroso wrote:
> > Look at the ajax validation example in showcase.
>
> Are you sure that the AJAX validation in the showc
On Monday 30 July 2007 19:12:45 Musachy Barroso wrote:
> Look at the ajax validation example in showcase.
Are you sure that the AJAX validation in the showcase is working properly?
In struts2-showcase/nodecorate/quizAjax.action (S2.1 snapshot), the first
example puts a strange response in the "R
2007/7/31, Diego Ezquerro <[EMAIL PROTECTED]>:
>
> Hi to everyone.
>
> I need to populate a dropdown list in a Jsp page taking the data from a
> MySQL database.
> Is there any other way (more elegant) to do this than writing a bean that
> stores information and then use it from the JSP page? using
Hi to everyone.
I need to populate a dropdown list in a Jsp page taking the data from a MySQL
database.
Is there any other way (more elegant) to do this than writing a bean that
stores information and then use it from the JSP page? using struts tags or
something like this?
I have red that is a
Using the regex field validator.
This is a regular expression that tests for a positive integer, it also
allows the field to be empty
^\d*$
This would be the same but not allow an empty field
^\d+$
Your field validator would look something like
My field s
Those examples don't actually work the way they should, do they? The tree
renders fine, but the topics are not working correctly. The text on the side
prompts to click a node, but clicking the node does nothing. Looks like the
event handler never gets called.
On 7/31/07, Ted Husted <[EMAIL PROTECT
I am using Struts 2 wich uses the
com.opensymphony.xwork2.validator.validators. It does not seem to
have a validator to test to see if a a value can be converted to an
integer. Is there a way to write my own validator to do this work?
On 7/31/07, Jorge Martín Cuervo <[EMAIL PROTECTED]> wrote:
>
Hi,
Is it a typo, I dont see a tag in ur code?
Thanks,
Nuwan
Grish wrote:
I studied the struts showcase sample of file downloading. I wanted to do
something similar but instead of setting the inputPath paremeter in
struts.xml I wanted to pass it in the url. I was thinking of using the same
a
On 7/31/07, Musachy Barroso <[EMAIL PROTECTED]> wrote:
> then there are examples:
>
> http://struts.apache.org/download.cgi#struts209
And within the examples, there are static and dynamic tree examples in
the Showcase:
* http://www.planetstruts.org/struts2-showcase/tags/ui/
-Ted.
-
I'm currently taking a look at Struts 2 and I particularly like getting
rid of ActionForms. As I understand, WebWorks/Struts2 offers two ways to
map forms to business domain objects:
1. I can provide a getter method (getDomainObject()) in the action and
refer to its properties in a JSP by using "do
I'm currently taking a look at Struts 2 and I particularly like getting
rid of ActionForms. As I understand, WebWorks/Struts2 offers two ways to
map forms to business domain objects:
1. I can provide a getter method (getDomainObject()) in the action and
refer to its properties in a JSP by using "do
Hi all,
I want to format currency in my application.
So I've tried this :
format.money={0,number,currency}
And it works fine. But I want to keep the same currency symbol in all locales.
In fact, I want an equivalence for this :
Can someone help me?
Julien
--
make sure you have the Exception interceptor in you interceptors stack.
Meissa
"Jiang, Jane (NIH/NCI) [C]" <[EMAIL PROTECTED]>
30/07/2007 19:47
Veuillez répondre à
"Struts Users Mailing List"
A
"Struts Users Mailing List"
cc
Objet
S2: How to display exception stack?
I defined a jsp
That must be a bug, when I updraded to version 1.0.1 of guice-struts
plugin and moved libraries from tomcat/common to web-inf/lib everything
is back to normal.
I will remove the guice filter :) if it is unnecessary.
Thx,
Lukasz
Dnia 30-07-2007 o godz. 3:24 Jeromy Evans napisał(a):
> Lukasz,
>
I studied the struts showcase sample of file downloading. I wanted to do
something similar but instead of setting the inputPath paremeter in
struts.xml I wanted to pass it in the url. I was thinking of using the same
action for several downloads and I would just pass the inputPath. But when I
trie
Try using absolute URL:s for the CSS files, it might be a workaround but it's
worked for me before.
Srinivas.N. wrote:
>
> I am using the restful mapper through a CompositeActionMapper as in
>
> value="org.apache.struts2.dispatcher.mapper.CompositeActionMapper"/>
>
>
> However, the css fil
Hi
which version of commons validator are you using?
http://struts.apache.org/1.2.9/userGuide/dev_validator.html
i so, you can see:
integer - validates that a field can be converted to an Integer.
intRange - validates that an integer field is within a specified range.
You have a very valid point, and I will get to it in 2 weeks' time, once I'm
done with my program assignments. It surely was an experience to go through.
Best,
Session
> How about writing a tutorial that others could find and follow?
>
> -Original Message- From: Session A Mwamufiya
>
72 matches
Mail list logo
