Struts2 remote commands execution

There's a critical remote commands execution vulnerability in XWork(used by Struts2), which fixed in 2.2.0, which isn't released yet but can be downloaded here: http://people.apache.org/builds/struts/2.2.0/ More details about this vulnerability can be found here:

Re: Struts2 remote commands execution

2010/7/10 Meder Kydyraliev mede...@gmail.com: There's a critical remote commands execution vulnerability in XWork(used by Struts2), which fixed in 2.2.0, which isn't released yet but can be downloaded here: http://people.apache.org/builds/struts/2.2.0/ More details about this vulnerability

Re: hi please help me struts2

thanks for the reply so by using the struts 2.1.8 jar files from apache the validation by giving he validation=true has to worked for that i asked on using hibernate the hibernate will make the class by anotation and for the validation also we has to do the same how can i make a crud with

Currency Formatting

Hi If I am displaying a Double to a JSP page what is the recommended way to format this is as a currency to two decimal points? Thanks Chris

Struts2+Hinerneta Validator+Spring

Hi, I want to use hibernate validation with struts and spring. I found the  Full Hibernate Plugin which combines the struts 2 and hibernate and hibernate validation. It has its own API for using the hibernate, but it does not use the Spring. However, I want to use is! So: 1- Can I use Full

validation and form display problem

i have a form that i display. but to display that form, i have to fetch some data from the database and then place that data on the valuestack (via backing beans). when the form is displayed, it expects that those backing beans should be populated. the form then posts to a save action. i have a

Re: Currency Formatting

Define something like: format.currency={0,number,currency} In your applications.properties file, then use: s:text name=format.currencys:param value=%{amount}//s:text HTH (*Chris*) On Sat, Jul 10, 2010 at 5:53 AM, Chris Miles ch...@chrismiles.org wrote: Hi If I am displaying a Double to

RE: Struts2+Hinerneta Validator+Spring

basicStackHibernate: Like Struts2 basickStack (NO validations here!), but with Hibernate Core session and transaction injections capability. defaultStackHibernate: Like Struts2 defaultStack, but DO NOT USE Struts2 validation methods (annotation and XML). Uses Hibernate Validation framework

RE: OutOfMemoryError: PermGen space!!!! Dont know why?

sounds as if class and method objects could possibly be missed by GC..try this for running under Jboss using Sun JVM (bin/run.conf) settings -Xms128m -Xmx512m -Dsun.rmi.dgc.client.gcInterval=360 -Dsun.rmi.dgc.server.gcInterval=360 -XX:+UseConcMarkSweepGC

RE: validation and form display problem

you could use the org.apache.struts2.config_browser.ShowValidatorAction then use java.beans.Introspector to acquire the bean from Validator.class try { java.beans.BeanInfo beanInfoFrom = java.beans.Introspector.getBeanInfo(validator.getClass(), Object.class); } catch

Strange behaviour on i18n

Hi, I have an i18n web site with struts 2. I don't know why the i18n text is not loaded properly. I expect 檢索詞不能空白 (Chinese characters), but it turns out 檢索詞不不能空白. But if I make any change on the html (e.g. the order of attributes or remove some elements), the text is loaded without any problem.