Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-20 Thread Shivam Agrahari
pls share with me if any demo available. On Wed, Apr 16, 2025 at 5:37 PM Nate Kerkhofs wrote: > Hi, > > > > Note that Struts 7 has a built-in CSP header interceptor that also has > support for cryptographic nonces in JavaScript tags. They may have > interceptors for these

Re: Issue in Struts 7.0.0 with tag

2025-04-17 Thread Wolfgang Knauf
he s:form tag declares that it accepts dynamic attributes but does not implement the required interface <%@page contentType="text/html" pageEncoding="UTF-8"%> <%@ taglib prefix="s" uri="/struts-tags" %> JSP Page

Re: Issue in Struts 7.0.0 with tag

2025-04-17 Thread shankar sawate
t; > > > org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:482) > > > at > > > > > > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:115) > > > at > > > > > > org.apache.cat

Re: Issue in Struts 7.0.0 with tag

2025-04-17 Thread M Huzaifah
g.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:896) > > at > > org.apache.tomcat.util.net > .NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1736) > > at > > org.apache.tomcat.util.net > .SocketProcessorBase.run(SocketProcessorBase

Re: Issue in Struts 7.0.0 with tag

2025-04-17 Thread shankar sawate
.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63) > at java.base/java.lang.Thread.run(Thread.java:1583) > > On Thu, Apr 17, 2025 at 12:04 PM shankar sawate < > sawa

Re: Issue in Struts 7.0.0 with tag

2025-04-17 Thread shankar sawate
ation on Tomcat 10.0.20. > The issue occurs when I try to run the web application from within the IDE. > > NetBeans shows the following error when the issue occurs: > > The s:form tag declares that it accepts dynamic attributes but does not > implement the requ

Re: Issue in Struts 7.0.0 with tag

2025-04-16 Thread shankar sawate
at it accepts dynamic attributes but does not implement the required interface <%@page contentType="text/html" pageEncoding="UTF-8"%> <%@ taglib prefix="s" uri="/struts-tags" %> JSP Page Hello World!

Re: Issue in Struts 7.0.0 with tag

2025-04-16 Thread Lukasz Lenart
wt., 15 kwi 2025 o 09:57 shankar sawate napisał(a): > While migrating to Struts 7.0.0, I'm encountering an issue when using the > tag. Even though the tag is present like this > > jsp > <%%> > I’m getting the following warning or error: > > The s:form t

Re: Issue in Struts 7.0.0 with tag

2025-04-16 Thread shankar sawate
Please help us in this issue On Wed, 16 Apr, 2025, 10:17 pm Tellis, Wyatt, wrote: > I see similar warnings when using NetBeans to edit JSPs that contain > Struts tags. However, these JSPs seem to compile just fine. Does anyone > know what causes these warning messages?

Re: Issue in Struts 7.0.0 with tag

2025-04-16 Thread Tellis, Wyatt
I see similar warnings when using NetBeans to edit JSPs that contain Struts tags. However, these JSPs seem to compile just fine. Does anyone know what causes these warning messages? Wyatt From: shankar sawate Sent: Monday, April 14, 2025 11:39 PM To: user

RE: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-16 Thread Nate Kerkhofs
Hi, Note that Struts 7 has a built-in CSP header interceptor that also has support for cryptographic nonces in JavaScript tags. They may have interceptors for these other missing headers as well, but I’m not sure. More information can be found in the documentation. Regards, Nate From

Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-16 Thread Shivam Agrahari
"Content-Security-Policy", "default-src 'self'; img-src 'self'; frame-src 'self'; connect-src 'self'; frame-ancestors 'self'; font-src 'self'; base-uri 'self'; form-actio

Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-16 Thread Lukasz Lenart
śr., 16 kwi 2025 o 07:30 Shivam Agrahari napisał(a): > Could you please advise on how to resolve these issues? For your reference, I > have attached the WAR file of the test project along with a few relevant > pages. The best option is to read through OWASP recommendations PDFs and apply them o

Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-16 Thread Dave Newton
; > I am currently developing a Java web application using the Struts 7.0.3 > framework, JDK 23, and Tomcat 11.0.5, with a Dynamic Web Module version > 6.1. Although the application is intended for an intranet environment, VA > (Vulnerability Assessment) clearance is still required. > >

Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-15 Thread Shivam Agrahari
Hi, I am currently developing a Java web application using the Struts 7.0.3 framework, JDK 23, and Tomcat 11.0.5, with a Dynamic Web Module version 6.1. Although the application is intended for an intranet environment, VA (Vulnerability Assessment) clearance is still required. To address

Issue in Struts 7.0.0 with tag

2025-04-15 Thread shankar sawate
Hi, While migrating to Struts 7.0.0, I'm encountering an issue when using the tag. Even though the tag is present like this jsp <%%> I’m getting the following warning or error: The s:form tag declares that it accepts dynamic attributes but does not implement the required interface <%%> <%%> <%%> <%%> <%%> <%-- --%> <%-- --%> <%%> <%%> <%-- --%> <%-- --%> <%%> <%-- --%> <%%> <%-- --%> <%%> <%%> <%%> <%%> <%%> <%%> <%%> <%%> <%%> <%%> <%%> <%%>

Re: Questions about migrating to Struts 7.0

2025-04-03 Thread Lukasz Lenart
czw., 3 kwi 2025 o 12:24 Shivam Agrahari napisał(a): > I have enabled dev mode and also log level to debug but there is no error > being displayed. Hard to guess with having no information from your side. Could you post your action with annotation on setters? Regards Łukasz ---

Re: Questions about migrating to Struts 7.0

2025-04-03 Thread Shivam Agrahari
Hi, I have enabled dev mode and also log level to debug but there is no error being displayed. Regards, Shivam On Wed, Apr 2, 2025 at 4:29 PM Lukasz Lenart wrote: > śr., 2 kwi 2025 o 12:29 Shivam Agrahari > napisał(a): > > I am in the process of upgrading a Java application from

Re: Questions about migrating to Struts 7.0

2025-04-02 Thread Lukasz Lenart
śr., 2 kwi 2025 o 12:29 Shivam Agrahari napisał(a): > I am in the process of upgrading a Java application from Struts 6.7.4 to > Struts 7.0.3. I've made the necessary changes as per the migration guide, > such as updating javax to jakarta. However, when I submit the user ID and &g

Re: Questions about migrating to Struts 7.0

2025-04-02 Thread Shivam Agrahari
Hi, I am in the process of upgrading a Java application from Struts 6.7.4 to Struts 7.0.3. I've made the necessary changes as per the migration guide, such as updating javax to jakarta. However, when I submit the user ID and password, they are not being accessed in the action class. Additio

Re: Issue with ServletActionContext.getRequest() returning null in JSP (Struts 7)

2025-03-31 Thread Lukasz Lenart
śr., 26 mar 2025 o 09:38 Lidin NT napisał(a): > Why is ServletActionContext.getRequest() returning null in JSP? Calling JSPs directly is a Bad Idea https://struts.apache.org/security/#never-expose-jsp-files-directly And calling JSPs directly means you skip the whole Action related machinery, wit

Re: Issue with ServletActionContext.getRequest() returning null in JSP (Struts 7)

2025-03-26 Thread Wolfgang Knauf
Hi, how do you invoke the jsp? I had a (maybe) similar issue and learned that I cannot invoke JSPs directly (by browsing to the jsp url), but have to call an ".action" url instead. Best regards Wolfgang Am 26.03.25 um 09:37 schrieb Lidin NT: Hi all, I'm working on a Strut

Issue with ServletActionContext.getRequest() returning null in JSP (Struts 7)

2025-03-26 Thread Lidin NT
Hi all, I'm working on a Struts 7 application and facing an issue where userViewUtil is showing an empty value in JSP. Setup: I'm using and to create and set values in JSP: When I try to display the values, they are empty: Code Details: UserViewUtilWra

Re: Questions about migrating to Struts 7.0

2025-03-11 Thread Lukasz Lenart
VALUE for a given setter (once defined for setter, there is no need to define another for getter) https://github.com/apache/struts-examples/blob/main/type-conversion/src/main/java/org/apache/struts/example/ThemeAction.java#L47-L57 > Another question I have: do s:url tags automatically handle th

Re: Questions about migrating to Struts 7.0

2025-03-11 Thread Prasanth
rieb Nate Kerkhofs: Hi, I'm analyzing the security changes for a migration from Struts 6.3 to Struts 7.0. One thing I'm wondering about is the StrutsParameter annotation that now needs to be added to all getters and setters that need to be accessed from the OGNL context. We have a numb

Re: Questions about migrating to Struts 7.0

2025-03-11 Thread Wolfgang Knauf
oJo getPojo() { ... } I don't know wether there is a depth value "unlimited". The "s:url" question has to be answered by someone else ;-) Best regards Wolfgang Am 11.03.25 um 16:09 schrieb Nate Kerkhofs: Hi, I'm analyzing the security changes for a migration fr

Questions about migrating to Struts 7.0

2025-03-11 Thread Nate Kerkhofs
Hi, I'm analyzing the security changes for a migration from Struts 6.3 to Struts 7.0. One thing I'm wondering about is the StrutsParameter annotation that now needs to be added to all getters and setters that need to be accessed from the OGNL context. We have a number of Actions whe

Re: Migrating from Struts 2.13.x to 7.0.3 with custom taglib issue

2025-03-06 Thread 楊茗閏
Hi looks like OGNL allowlist capability is indeed the issue Thanks 2025年3月5日(水) 16:43 Lukasz Lenart : > > śr., 5 mar 2025 o 09:12 楊茗閏 napisał(a): > > > > Hi > > I am immigrating Struts from 2.13.x to 7.0.3 for a very old project. > > The project has its own taglib

Re: [ANN] Apache Struts 6.7.4

2025-03-05 Thread Lukasz Lenart
śr., 5 mar 2025 o 18:50 Brunstein, David napisał(a): > > Hi Lukasz, > > The download page only shows the Struts version 7.0.3 > > https://struts.apache.org/download.cgi > > Would you please update the page with Struts 6.7.4? Done https://struts.apache.org/download.cgi#s

RE: [ANN] Apache Struts 6.7.4

2025-03-05 Thread Brunstein, David
Hi Lukasz, The download page only shows the Struts version 7.0.3 https://struts.apache.org/download.cgi Would you please update the page with Struts 6.7.4? Thanks, Davo From: Lukasz Lenart Sent: March 5, 2025 8:12 AM To: Struts Users Mailing List Cc: announceme...@struts.apache.org; annou

[ANN] Apache Struts 6.7.4

2025-03-05 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Apache Struts version 6.7.4 is available as a “General Availability” release. The GA designation is our highest quality grade. The Apache Struts is an elegant, extensible framework for creating enterprise-ready Java web applications. The

Re: Migrating from Struts 2.13.x to 7.0.3 with custom taglib issue

2025-03-05 Thread Lukasz Lenart
śr., 5 mar 2025 o 09:12 楊茗閏 napisał(a): > > Hi > I am immigrating Struts from 2.13.x to 7.0.3 for a very old project. > The project has its own taglib following the Struts style and uses > Freemarker for the template. > However, I am not able to get ${attributes} in the freema

Migrating from Struts 2.13.x to 7.0.3 with custom taglib issue

2025-03-05 Thread 楊茗閏
Hi I am immigrating Struts from 2.13.x to 7.0.3 for a very old project. The project has its own taglib following the Struts style and uses Freemarker for the template. However, I am not able to get ${attributes} in the freemarker template. I have not changed the structure of my taglib class and

[ANN] Apache Struts 7.0.3

2025-03-03 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Apache Struts version 7.0.3 is available as a “General Availability” release. The GA designation is our highest quality grade. The Apache Struts is an elegant, extensible framework for creating enterprise-ready Java web applications. The

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-13 Thread Mahabir Gupta
Dear Lukasz, Noted with thanks. Regards Mahabir On Fri, Feb 14, 2025 at 12:21 AM Lukasz Lenart wrote: > I would suggest learning Maven and use it to build Struts app > https://struts.apache.org/getting-started/hello-world-using-struts2 > > śr., 12 lut 2025 o 07:46 Lukasz Lenart

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-13 Thread Lukasz Lenart
I would suggest learning Maven and use it to build Struts app https://struts.apache.org/getting-started/hello-world-using-struts2 śr., 12 lut 2025 o 07:46 Lukasz Lenart napisał(a): > > I just noticed we are polluting this thread with unrelated discussion, > please start a new thread t

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Lukasz Lenart
I just noticed we are polluting this thread with unrelated discussion, please start a new thread to discuss your problem. śr., 12 lut 2025 o 07:30 Mahabir Gupta napisał(a): > > Dear Lukasz, > > Previously I did not include the xwork-core-2.3.37.jar but added it to > follow the youtube video but n

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Mahabir Gupta
Dear Lukasz, Previously I did not include the xwork-core-2.3.37.jar but added it to follow the youtube video but now I have removed it but the problem still persists. http://localhost:8080/Struts2Starter/tutorials/getTutorial.action https://github.com/MahabirGupta/Struts2Starter HTTP Status 404

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Lukasz Lenart
śr., 12 lut 2025 o 05:17 Mahabir Gupta napisał(a): > > Dear Lukasz and Dave, > > The only deploy I am seeing is the below and this is my github link > https://github.com/MahabirGupta/Struts2Starter. I noticed you have xwork-core-2.3.37.jar in your libs, please remove this JAR as Xwork classes ar

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Mahabir Gupta
Dear Lukasz and Dave, The only deploy I am seeing is the below and this is my github link https://github.com/MahabirGupta/Struts2Starter. Feb 12, 2025 11:46:52 AM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Dwtp.deploy=/Users/mahabirguptanew/eclipse-works

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Lukasz Lenart
pon., 10 lut 2025 o 04:06 Mahabir Gupta napisał(a): > > Dear Lukasz, > > I am using Struts2 using struts2-core-2.5.8.jar with Java 17. > > http://localhost:8080/manager/html > HTTP Status 404 – Not Found > -- > > *Type* Status Report > > *Message* The requested resource

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Dave Newton
get resource or is not willing to disclose that one exists. > > -- > > Apache Tomcat/9.0.82 > > Thank you. > > > > Regards > > Mahabir > > > > On Sun, Feb 9, 2025 at 8:32 PM Lukasz Lenart > > wrote: >

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-11 Thread Mahabir Gupta
asz Lenart > wrote: > >> niedz., 9 lut 2025 o 12:23 Mahabir Gupta >> napisał(a): >> > Apache Tomcat/9.0.82 >> >> Do you use Struts 6.7.x or 7.0? Can you confirm the app has been >> deployed into Tomcat using Tomcat Manager App? >> >> Cheers >

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-09 Thread Mahabir Gupta
isał(a): > > Apache Tomcat/9.0.82 > > Do you use Struts 6.7.x or 7.0? Can you confirm the app has been > deployed into Tomcat using Tomcat Manager App? > > Cheers > Lukasz > > - > To unsubscribe, e-mail: u

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-09 Thread Lukasz Lenart
niedz., 9 lut 2025 o 12:23 Mahabir Gupta napisał(a): > Apache Tomcat/9.0.82 Do you use Struts 6.7.x or 7.0? Can you confirm the app has been deployed into Tomcat using Tomcat Manager App? Cheers Lukasz - To unsubscribe, e-m

Fwd: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-09 Thread Mahabir Gupta
xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd"; id="WebApp_ID" version= "3.1"> Struts2Starter struts2 org.apache.struts2.dispatcher.filter.StrutsPrepareAndExecuteFilter struts2 /* http://struts.apache.org/dtds/struts-2.0.dtd";> /succ

RE: [EXTERNAL] Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-04 Thread ndeleon
Regards, Noel Deleon -Original Message- From: Murali Challa Sent: Tuesday, February 4, 2025 3:11 AM To: Struts Users Mailing List ; lukaszlen...@apache.org Subject: [EXTERNAL] Re: Facings issues while migrating from Struts 2.5.x to 6.7 CAUTION! This email originated outside of the

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-04 Thread 哈哈哈哈
Murali Challa 於 2025年2月4日 週二 下午4:12 寫道: > Hi Lukasz , > > I have created a struts project with with JSP EL using struts v6.7.0 > dependencies and the EL is working fine in this test project. > > This test project is deployed in tomcat and tested. > > Now I'm really conf

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-02-04 Thread Murali Challa
Hi Lukasz , I have created a struts project with with JSP EL using struts v6.7.0 dependencies and the EL is working fine in this test project. This test project is deployed in tomcat and tested. Now I'm really confused on why it is not working in our actual application. Our application ru

Re: Probable bug in Struts 7.0.0

2025-02-01 Thread Lukasz Lenart
czw., 30 sty 2025 o 18:25 Bibonne Fabrice napisał(a): > > This is done for the issue : https://issues.apache.org/jira/browse/WW-5525 Thanks, I already prepared PR, yet I want to increase code coverage https://github.com/apache/struts/pull/1201 > As a workaround, I registered the insta

RE: Probable bug in Struts 7.0.0

2025-01-30 Thread Bibonne Fabrice
igine- De : Lukasz Lenart Envoyé : mercredi 29 janvier 2025 18:00 À : Struts Users Mailing List Objet : Re: Probable bug in Struts 7.0.0 « Ce courriel provient d’un expéditeur extérieur à l’Insee. Compte tenu du contexte de menace cyber actuel il convient d’être extrêmement vigilan

Re: Probable bug in Struts 7.0.0

2025-01-29 Thread Lukasz Lenart
wt., 28 sty 2025 o 10:39 Bibonne Fabrice napisał(a): > First, thank you very much to all commiters for the new version of Struts > 7.0.0 : it is a great improvement for many apps in my firm. > > I think, there is maybe a bug inside the SecurityMemberAccess : it appears > when an

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-29 Thread Lukasz Lenart
śr., 29 sty 2025 o 09:39 Murali Challa napisał(a): > And do we need to have below constant and any other constant to be added in > our struts.xml file? > > No, you don't need that, I messed up with Struts

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-29 Thread Murali Challa
OK, let me check on logs for some clue. And do we need to have below constant and any other constant to be added in our struts.xml file? On Wed, 29 Jan, 2025, 13:59 Lukasz Lenart, wrote: > śr., 29 sty 2025 o 08:46 Murali Challa > napisał(a): > > > Yes, this is what we are using in our appli

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-29 Thread Lukasz Lenart
śr., 29 sty 2025 o 08:46 Murali Challa napisał(a): > Yes, this is what we are using in our application code. Same code we have > mentioned at beginning of this mailing. > > Just to keep it clear, our code looks as below. > > Action Class (extends ActionSupport): > > HttpSession session = ServletA

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-28 Thread Murali Challa
gt; > > > > > > > That is the only difference in can see from your example. > > > > > > > > Can you try something link below and see if it works? > > > > > > > > > > > > ${item.empid} > > > > ${s.index} // inde

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-28 Thread Lukasz Lenart
> > > > > > It works, btw. I had to configure allowlist list like this (or you can > > disable this functionality) > > > > > > > > > > > > > > > > > > We set availableItems

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-28 Thread Murali Challa
> > ${item.empid} > > ${s.index} // index as well coming as empty > > > > It works, btw. I had to configure allowlist list like this (or you can > disable this functionality) > > > > > > > > > > We set availableItems to session in our

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-28 Thread Lukasz Lenart
l coming as empty > It works, btw. I had to configure allowlist list like this (or you can disable this functionality) > > We set availableItems to session in our struts action layer as below. > > session.setAttribute("availableItems", availableItems); How do you

Re: Re: Struts 2.5.x to 6.4.0

2025-01-28 Thread Lukasz Lenart
wt., 28 sty 2025 o 15:25 John Wilson napisał(a): > In the meantime, is it possible to create a custom TypeConverterCreator to > then call upon the createBean method and get this working? > > Maybe implement the TypeConverterCreator and redefine in struts.xml? Yes, it should be possible, implement

Re: Re: Struts 2.5.x to 6.4.0

2025-01-28 Thread John Wilson
at 8:40 AM Lukasz Lenart wrote: > wt., 28 sty 2025 o 14:22 John Wilson napisał(a): > > I did go through the constants and update as required. We have the > > typeconverters defined application wide using the > > struts-conversion.properties. > > > > Although I’

Re: Re: Struts 2.5.x to 6.4.0

2025-01-28 Thread Lukasz Lenart
wt., 28 sty 2025 o 14:22 John Wilson napisał(a): > I did go through the constants and update as required. We have the > typeconverters defined application wide using the > struts-conversion.properties. > > Although I’m wondering if this a bug related to > > https://issues.a

Re: Re: Struts 2.5.x to 6.4.0

2025-01-28 Thread John Wilson
Hi Lukasz, I did go through the constants and update as required. We have the typeconverters defined application wide using the struts-conversion.properties. Although I’m wondering if this a bug related to https://issues.apache.org/jira/browse/WW-4996?jql=project%20%3D%20WW%20AND%20fixVersion

Probable bug in Struts 7.0.0

2025-01-28 Thread Bibonne Fabrice
Hi everybody, First, thank you very much to all commiters for the new version of Struts 7.0.0 : it is a great improvement for many apps in my firm. I think, there is maybe a bug inside the SecurityMemberAccess : it appears when an ognl expression such as `(new com.mycompany.MyClass()).method

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-27 Thread Murali Challa
We get the availableItems from session. That is the only difference in can see from your example. Can you try something link below and see if it works? ${item.empid} ${s.index} // index as well coming as empty We set availableItems to session in our struts action layer as below

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-27 Thread Lukasz Lenart
g and we can see table with empty rows (here rows count > is equal to session.list size) is getting displayed in UI. I assume your code is similar to this example: https://github.com/apache/struts/blob/main/apps/showcase/src/main/webapp/WEB-INF/empmanager/listEmployees.jsp#L49-L55 And I mod

Re: Re: Struts 2.5.x to 6.4.0

2025-01-27 Thread Lukasz Lenart
pon., 27 sty 2025 o 15:31 John Wilson napisał(a): > > Yes. It should be using Spring to inject it as it did on 2.5.33. > > We have the struts2-spring-plugin which my understanding sets the object > factory in the web.xml to spring. I don't recall any major changes around Spring, maybe it's relate

RE: Re: Struts 2.5.x to 6.4.0

2025-01-27 Thread John Wilson
ng issues upgrading struts versions. > > In particular with a custom StrutsTypeConverter. > > > > The custom converter has a @PersistenceContext annotation for the > > EntityManager which used to work. > > > > The entityManager is used to find class types for conve

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Murali Challa
Hi Lukasz, Yes, the values in session exist. We are able to iterate through session.list and while trying to print values of session.list using EL, empty values are getting printed. EL is inside tag and we can see table with empty rows (here rows count is equal to session.list size) is getting

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Lukasz Lenart
śr., 22 sty 2025 o 11:25 Murali Challa napisał(a): > Not sure why it is printing empty values while iterating through session > list. Could you confirm the value in session exists? Something like this: https://struts.apache.org/getting-started/http-session#accessing-http-session-objects-in-the-

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Lukasz Lenart
Hi Heikki, First of all, could you start a new thread as this one is about migrating from Struts 2.5.x to 6.x and your problem is related to migrating to Struts 7.x? Also could you share a full example of your Java & JSP code? Looks like the and are connected based on the used ${sub

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Dave Newton
On Sun, Jan 26, 2025 at 22:53 Heikki Hyyrö wrote: > I would of course *love* to provide a small example, but it seems a bit > difficult (would probably require quite considerable effort for just > that purpose). The application in question contains e.g. 100+ JSP files > and the pages are composed

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Heikki Hyyrö
(and the "fix" described above) seem to apply to more or less all of the quite numerous loops used in the application's JSP files. Another thing is that I had problems with url parameters in 7.0.0. The application follows the Struts "a"-tag documentation and creates links

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread M Huzaifah
gt; Lukasz Lenart kirjoitti 26.1.2025 klo 8.32: > > Did you read through the Migration guide? It looks like one of the > > security factors blocks executions of your expression > > https://cwiki.apache.org/confluence/display/WW/Struts+6.x.x+to+7.x.x+migration#Struts6.x.xto7.x.xmigr

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Heikki Hyyrö
26.1.2025 klo 8.32: Did you read through the Migration guide? It looks like one of the security factors blocks executions of your expression https://cwiki.apache.org/confluence/display/WW/Struts+6.x.x+to+7.x.x+migration#Struts6.x.xto7.x.xmigration-Strongersecurity Take a look on the allo

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-26 Thread Lukasz Lenart
These kinds of issues are very hard to debug or investigate, so it would be good to prepare a small demo app reproducing the issue. You can use one of the struts-examples app as a starting point https://github.com/apache/struts-examples/ Thanks in advance Łukasz

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-25 Thread Lukasz Lenart
me in 7.0.0 whereas in 6.3.0.2 it > does. The names show up if I refer to the name without the object > reference in the form . > > While investigating this I noted that even the set-tag example snippet > from Struts documentation no longer works? If I embed the following lines > &

Re: Struts 2.5.x to 6.4.0

2025-01-25 Thread Lukasz Lenart
czw., 23 sty 2025 o 17:51 jw1474674 napisał(a): > Hi, I’m facing issues upgrading struts versions. > In particular with a custom StrutsTypeConverter. > > The custom converter has a @PersistenceContext annotation for the > EntityManager which used to work. > > The entityMa

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-23 Thread Heikki Hyyrö
m . While investigating this I noted that even the set-tag example snippet from Struts documentation no longer works? If I embed the following lines X Jane Doe Y inside a JSP page, the result is only "X Y" in 7.0.0 but the whole expected "X Jane Doe Y" in 6.3.0.2. Here I ad

Re: Struts 6.7.0 and xwork2 packages

2025-01-23 Thread Heikki Hyyrö
Thanks Wolfgang, this was the culprit for that particular problem! But well, after disabling annotations, the app started to have other problems. I will write about that as a reply to another more related thread. -Heikki Wolfgang Knauf kirjoitti 20.1.2025 klo 23.12: Hi Heikki, your descrip

Struts 2.5.x to 6.4.0

2025-01-23 Thread jw1474674
Hi, I’m facing issues upgrading struts versions. In particular with a custom StrutsTypeConverter. The custom converter has a @PersistenceContext annotation for the EntityManager which used to work. The entityManager is used to find class types for conversion. But now I am getting an NPE in the

RE: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Nate Kerkhofs
Hi Murali, I'm not a Struts developer, but it might help if you create a small project with as few dependencies as possible that shows the bug that you're experiencing and share it through GitHub or another publicly accessible platform. The problem could lie with a non-Struts depend

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Murali Challa
No luck. It is not working. Was there some issue with EL for using inside struts tags? On Wed, 22 Jan, 2025, 16:56 Lukasz Lenart, wrote: > śr., 22 sty 2025 o 11:25 Murali Challa > napisał(a): > > Pure EL is working fine. > > > > Not sure why it is printing empty values

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Lukasz Lenart
śr., 22 sty 2025 o 11:25 Murali Challa napisał(a): > Pure EL is working fine. > > Not sure why it is printing empty values while iterating through session > list. One more thing, try this: // working ${id} // Not working if works, something has been broken in the framework Cheers Łukasz

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Murali Challa
e this: > > hello > ${myVar} > > If this works I would focus on checking logs, maybe you get a warning > from SecurityMemberAccess, or #session is not accessible or > unavailable (Struts doesn't create HttpSession if not needed). > > > Cheers > Łukasz >

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Lukasz Lenart
ing like this: hello ${myVar} If this works I would focus on checking logs, maybe you get a warning from SecurityMemberAccess, or #session is not accessible or unavailable (Struts doesn't create HttpSession if not needed). Cheers Łukasz

Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-22 Thread Murali Challa
Hi, We are migrating our application from struts2-core 2.5.33 to 6.7.0. Post migration, we are facing issues while populating bean values in session. ${} is printing null values. Seems the EL is not working post 6.x migration. Can you help me to understand if I'm missing something in this migra

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Lukasz Lenart
this helps > > Wolfgang > > Am 20.01.25 um 19:52 schrieb Heikki Hyyrö: > > Dear all, > > > > I might(?) have a similar problem. When I upgragded Struts 2 version > > from 6.3.0.2 to 7.0.0 and replaced xworks2 imports by their struts2 > > counterparts, one pr

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Wolfgang Knauf
: struts.parameters.requireAnnotations=true Hope this helps Wolfgang Am 20.01.25 um 19:52 schrieb Heikki Hyyrö: Dear all, I might(?) have a similar problem. When I upgragded Struts 2 version from 6.3.0.2 to 7.0.0 and replaced xworks2 imports by their struts2 counterparts, one problem is that the application&#

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Heikki Hyyrö
Dear all, I might(?) have a similar problem. When I upgragded Struts 2 version from 6.3.0.2 to 7.0.0 and replaced xworks2 imports by their struts2 counterparts, one problem is that the application's actions no longer receive parameters from html forms. I suppose this could be caused

Re: Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-13 Thread Lukasz Lenart
I don't recall changes in this area, only this one but it was in Struts 2.3 https://issues.apache.org/jira/browse/WW-4073 niedz., 12 sty 2025 o 04:22 Murali Challa napisał(a): > > Hi, > > We are migrating our application from struts2-core 2.5.33 to 6.7.0. > > Post migratio

Facings issues while migrating from Struts 2.5.x to 6.7

2025-01-11 Thread Murali Challa
Hi, We are migrating our application from struts2-core 2.5.33 to 6.7.0. Post migration, we are facing issues while populating bean values in session. ${} is printing null values. Seems the EL is not working post 6.x migration. Can you help me to understand if I'm missing something in this migra

Re: Struts 6.7.0 and xwork2 packages

2025-01-09 Thread Lukasz Lenart
śr., 8 sty 2025 o 21:26 Tellis, Wyatt napisał(a): > I recently upgraded my app to 6.7.0 and saw that many classes are deprecated > due to the renaming of the xwork2 packages. I tried changing the imports to > use the org.apache.struts2 equivalents, but my application no longer works. > Everyth

Struts 6.7.0 and xwork2 packages

2025-01-08 Thread Tellis, Wyatt
Hi, I recently upgraded my app to 6.7.0 and saw that many classes are deprecated due to the renaming of the xwork2 packages. I tried changing the imports to use the org.apache.struts2 equivalents, but my application no longer works. Everything compiles correctly, but I get a 404 error when I g

Re: Struts 7.0.0 - JSP rendering is taking 3X time compare to struts 6.3.0.2

2024-12-26 Thread Lukasz Lenart
Could you prepare a sample app instead of sending your Java & JSP code? I already tried to reproduce your problem yet using Struts tags and everything is perfectly fine. Also why do you use instead of ? Cheers Lukasz czw., 26 gru 2024 o 11:08 Dipak Tank napisał(a): > > >

[ANN] Apache Struts 7.0.0 GA

2024-12-19 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Apache Struts version 7.0.0 is available as a “General Availability” release. The GA designation is our highest quality grade. The Apache Struts is an elegant, extensible framework for creating enterprise-ready Java web applications. The

Re: Struts 7 Release Date (GA)

2024-12-18 Thread Lukasz Lenart
śr., 18 gru 2024 o 08:30 Abhinandan Agarwal napisał(a): > > Hi, > Wanted to know a tentative date for the release of Struts 7 GA. It's under Vote now https://lists.apache.org/thread/4w015n6gdcpy68wng1knr4qgokbyskz3

Struts 7 Release Date (GA)

2024-12-17 Thread Abhinandan Agarwal
Hi, Wanted to know a tentative date for the release of Struts 7 GA.

Re: Struts 6.7.0 and JRebel issue

2024-12-09 Thread Lukasz Lenart
wt., 10 gru 2024 o 00:02 David Brunstein napisał(a): > > Hi, > > My Team has found the following issue. > > JRebel no longer seems to work with the latest version of Struts, 6.7.0. > When we try to hit a page in our app, we immediately get the following > erro

Struts 6.7.0 and JRebel issue

2024-12-09 Thread David Brunstein
Hi, My Team has found the following issue. JRebel no longer seems to work with the latest version of Struts, 6.7.0. When we try to hit a page in our app, we immediately get the following error: JRebel: Class 'com.opensymphony.xwork2.ActionContext' could not be pr

  1   2   3   4   5   6   7   8   9   10   >