Conversion Error Interceptor prevent errors for empty values

2018-02-13 Thread Paul Zepernick
Can someone provide some clarification on if this interceptor should be adding a field error when an empty string is passed to a Integer in the action? I am trying to prevent the field error from happening in this case. It looks like it should not be happening according to the docs:

Re: Suspicious Request

2018-02-13 Thread Yasser Zamani
On 2/13/2018 3:57 PM, Rajvinder Pal wrote: > I am using struts2 2.3.16.1 version. That may be the reason 404 error is > returned. But still i got a new file "one.jsp", inside the WAR. It has > only one IF condition as give below:- > > <%if(request.getParameter("f")!=null)(new >

Re: Suspicious Request

2018-02-13 Thread Rajvinder Pal
Hi Yasser, I am using struts2 2.3.16.1 version. That may be the reason 404 error is returned. But still i got a new file "one.jsp", inside the WAR. It has only one IF condition as give below:- <%if(request.getParameter("f")!=null)(new

Re: Suspicious Request

2018-02-13 Thread Yasser Zamani
On 2/13/2018 12:34 PM, Rajvinder Pal wrote: > Hi, > > I have a struts application deployed on application server. Some time I am > receiving the below requests in web server logs. Not sure if i can post it > in this struts forum. What should i do to restrict it?What kind of > vulnerability it

Suspicious Request

2018-02-13 Thread Rajvinder Pal
Hi, I have a struts application deployed on application server. Some time I am receiving the below requests in web server logs. Not sure if i can post it in this struts forum. What should i do to restrict it?What kind of vulnerability it is ? "GET