About includeParams in S2-014

2013-06-04 Thread Shohji Mikami
Struts 2 security report S2-014 strongly recommends upgrading Struts to 2.3.14.2, but in our project current Struts 2.3.4.1 is difficult to upgrade. Our project member verified the problem of S2-014 and found -- when the includeParams=all or get were not specified in s:url and s:a tag, no

Re: About includeParams in S2-014

2013-06-04 Thread Maurizio Cucchiara
Even if probably it's not the best way to go, If you are not using includeParams all or get, you would not have to concern about S2-013 and S2-014. Please, check your app against S2-015 [1]. [1] https://cwiki.apache.org/confluence/display/WW/S2-015 Maurizio Cucchiara On 4 June 2013 10:34,

RE: About includeParams in S2-014

2013-06-04 Thread Shohji Mikami
Thank you for your quick response and effective information. I'll check the S2-015 report. I could not find this report via google. Your new information is really appreciated. Shohji Mikami -Original Message- From: maurizio.cucchi...@gmail.com [mailto:maurizio.cucchi...@gmail.com] On

maven artifacts

2013-06-04 Thread Antonios Gkogkakis
Hi all, version 2.3.14.3 is not available in maven repo and actually I can't find at the release pages either http://struts.apache.org/download.cgi#struts23143 Antonios

Re: maven artifacts

2013-06-04 Thread Lukasz Lenart
2013/6/4 Antonios Gkogkakis gkogk...@tcd.ie: Hi all, version 2.3.14.3 is not available in maven repo and actually I can't find at the release pages either http://struts.apache.org/download.cgi#struts23143 Is under Vote and should be released today. Regards -- Łukasz + 48 606 323 122

Re: maven artifacts

2013-06-04 Thread Maurizio Cucchiara
The volte for the version you mentioned is still open Il giorno 04/giu/2013 14:19, Antonios Gkogkakis gkogk...@tcd.ie ha scritto: Hi all, version 2.3.14.3 is not available in maven repo and actually I can't find at the release pages either http://struts.apache.org/download.cgi#struts23143

Re: maven artifacts

2013-06-04 Thread Antonios Gkogkakis
Thanks guys, I'd also note that last version on maven repo is 2.3.14. Antonios On 4 June 2013 13:28, Maurizio Cucchiara mcucchi...@apache.org wrote: The volte for the version you mentioned is still open Il giorno 04/giu/2013 14:19, Antonios Gkogkakis gkogk...@tcd.ie ha scritto: Hi all,

Re: maven artifacts

2013-06-04 Thread Lukasz Lenart
2013/6/4 Antonios Gkogkakis gkogk...@tcd.ie: Thanks guys, I'd also note that last version on maven repo is 2.3.14. All versions are available http://search.maven.org/#search%7Cgav%7C1%7Cg%3A%22org.apache.struts%22%20AND%20a%3A%22struts2-core%22 Regards -- Łukasz + 48 606 323 122

Testing with xslt result type + spring

2013-06-04 Thread Mael Le Guével
Hello, I am trying to write unit tests for an action that uses xslt result type with struts 2.3.4.1 I am using a XSLT file located in WEB-INF to render the result (the location is something like: /WEB-INF/xslt/myfile.xsl). That works. But I cannot figure out how I can test the action. I would

Re: maven artifacts

2013-06-04 Thread Antonios Gkogkakis
Sorry Lukasz, I was actually checking http://mvnrepository.com/artifact/org.apache.struts/struts2-parent and not maven central :) On 4 June 2013 13:48, Lukasz Lenart lukaszlen...@apache.org wrote: 2013/6/4 Antonios Gkogkakis gkogk...@tcd.ie: Thanks guys, I'd also note that last version

Re: maven artifacts

2013-06-04 Thread Lukasz Lenart
2013/6/4 Antonios Gkogkakis gkogk...@tcd.ie: Sorry Lukasz, I was actually checking http://mvnrepository.com/artifact/org.apache.struts/struts2-parent and not maven central :) No problem, Central is our target ;-) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

[ANN] Struts 2.3.14.3 GA (fast-track) release available

2013-06-04 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Struts 2.3.14.3 is available as a General Availability release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed