RE: Struts zero-day vulnerability

2014-05-16 Thread Deepak Subbanarasimha
Lukasz, Thank you for responding. This is very helpful. Do you have information on what kind of attacks this vulnerability would expose systems to? Ex. Cross-Site scripting. Is there anything else? Do you have any suggestions on how to test this fix? Thanks, Deepak -Original Message-

Re: ModelDriven and ParamsPrepareParams

2014-05-16 Thread Lukasz Lenart
Number 2 is also my favorite but it quite often depends ... on dev's preferences :D I remember that I wanted solve that case with ParametersInterceptors but there was a problem when and how to instantiate Model . 2014-05-08 9:27 GMT+02:00 Antonio Sánchez : > Hello. > > I have found problems using

Re: No parameters set in action when file upload exceeds max size

2014-05-16 Thread Greg Lindholm
Yes this is the issue. On Wed, May 14, 2014 at 1:05 AM, Lukasz Lenart wrote: > https://issues.apache.org/jira/browse/WW-3025 ? > > > Regards > -- > Łukasz > + 48 606 323 122 http://www.lenart.org.pl/ > > 2014-05-09 17:43 GMT+02:00 Greg Lindholm : > > When I try to upload a file that exceeds the

Re: No parameters set in action when file upload exceeds max size

2014-05-16 Thread Christoph Nenning
Hi, as I commented in JIRA: maybe they are related, cannot be sure. But I like the streaming approach of https://issues.apache.org/jira/browse/WW-3025 Regards, Christoph > > Does this issue [1] is related? > > [1] https://issues.apache.org/jira/browse/WW-4345 > > 2014-05-12 21:07 GMT+

Re: No parameters set in action when file upload exceeds max size

2014-05-16 Thread Christoph Nenning
> > https://issues.apache.org/jira/browse/WW-3025 ? > Yes, that is the same. > > 2014-05-09 17:43 GMT+02:00 Greg Lindholm : > > When I try to upload a file that exceeds the configured 2M max then no > > parameters get set on my action. > > > > I can't present the user with a pretty error

Re: No parameters set in action when file upload exceeds max size

2014-05-16 Thread Paul Benedict
https://issues.apache.org/jira/browse/WW-3025 Cheers, Paul On Fri, May 9, 2014 at 10:43 AM, Greg Lindholm wrote: > When I try to upload a file that exceeds the configured 2M max then no > parameters get set on my action. > > I can't present the user with a pretty error message since all contex