Re: Iterating constants in iterator tag

2013-07-29 Thread Lukasz Lenart
2013/7/29 Antonio Sánchez juntandolin...@gmail.com: Given: constant name=custom.constants.locales value=es,en,it/ Use it in: s:iterator custom.constants.locales ... /s:iterator How to? Injecting with @Inject? Yes Any direct access method from OGNL? Injecting is better,

Re: K8 Struts2 Exploit

2013-07-30 Thread Lukasz Lenart
What is K8 Struts2 Exploit? I cannot find any informations about. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/7/30 Zoran Avtarovski zo...@sparecreative.com: I've just found a number of new jsp pages on a web app we developed. There was a text file relating to the K8

Re: K8 Struts2 Exploit

2013-07-30 Thread Lukasz Lenart
Maybe instead yielding read documentation? Via http://struts.apache.org/mail.html the email address user-unsubscr...@struts.apache.org is valid one, maybe remove leading colon? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/7/30 Steven Sinclair stevensincl...@163.com:

Re: K8 Struts2 Exploit

2013-07-30 Thread Lukasz Lenart
@Steven Your e-mail address is scored as a SPAM. @Infra can you remove Steven Sinclair from Struts User mailing list? Thanks in advance! Kind regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/7/30 Steven Sinclair stevensincl...@163.com: what‘s this? error below: SMTP

Re: K8 Struts2 Exploit

2013-07-30 Thread Lukasz Lenart
I have already asked Infra to do that, but maybe there is some guardian angel around to help you with. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/7/30 Steven Sinclair stevensincl...@163.com: 原始邮件 发件人: Steven Sinclairstevensincl...@163.com 收件人: Lukasz

Re: HTML code not displaying in site documentation

2013-07-30 Thread Lukasz Lenart
Updating 2013/7/30 Antonio Sánchez juntandolin...@gmail.com: Also: http://struts.apache.org/development/2.x/docs/struts-control-tags.html El Viernes, 19 de julio de 2013 23:26:20 usted escribió: El Viernes, 19 de julio de 2013 12:45:20 Lukasz Lenart escribió: I made a change

Re: Translating submit tag

2013-07-30 Thread Lukasz Lenart
2013/7/30 Antonio Sánchez juntandolin...@gmail.com: I'm using: s:submit name=%{getText('enter')} / This is exactly the same as in Submit class Trying to simplify: s:submit key=enter / It should work out-of-the-box, could you post the whole stack trace and what theme do you use? Regards

Re: HTML code not displaying in site documentation

2013-07-30 Thread Lukasz Lenart
2013/7/30 Antonio Sánchez juntandolin...@gmail.com: http://struts.apache.org/development/2.x/docs/processing-forms.html I believe all or almost all of getting started tutorial have the problem. Reviewed all the tutorials and re-exporting theme Regards -- Łukasz + 48 606 323 122

Re: missing action

2013-07-31 Thread Lukasz Lenart
This is a well know problem with Eclipse - it stop deploying new version at some point. Try to Clean and Deploy (that how it was in NetBeans - I don't have Eclipse) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Keeping current locale after logging out

2013-07-31 Thread Lukasz Lenart
2013/7/31 Antonio Sánchez juntandolin...@gmail.com: At logging out, session is invalidated and redirected page is displayed in default language. Say: default language: Spanish; current language: English; logging out and resulted page is in Spanish, but should be English. . This is not

Re: Translating submit tag

2013-08-01 Thread Lukasz Lenart
2013/7/31 Antonio Sánchez juntandolin...@gmail.com: Sorry, what do you mean with Submit class? Submit component behind submit.ftl Use case is simple login. The exception is thrown when the form does not pass validation and results in input. Displayed s:actionmessage / is: Developer

Re: Issue with parameters with Struts 2.3.15.1

2013-08-01 Thread Lukasz Lenart
Can you test with the latest SNAPSHOT? This can be related to https://issues.apache.org/jira/browse/WW-4142 And you can directly use DefaultActionMapper from 2.3.15.1, just copy the code and define your custom Action mapper as specified in the docs. Regards -- Łukasz + 48 606 323 122

Re: s:select - option appears with no displayed value w/html brackets

2013-08-01 Thread Lukasz Lenart
2013/7/31 CRANFORD, CHRIS chris.cranf...@setech.com: We just discovered that if a MapString,String gets passed to a select-tag where the entry's key/value pair are MULTIPLE/MULTIPLE that the option's value attribute contains MULTIPLE as one would have expected, but the body of the

Re: Is there any security issue or any side effect if we dont use conversionError interceptor?

2013-08-02 Thread Lukasz Lenart
2013/8/2 Sreekanth S. Nair sreekanth.n...@egovernments.org: Any idea? There be no problem with that - CEI is used to display conversion errors, there is no logic inside used by some vital parts of framework. But I would rather find the origins of the problem you have - as I understand your

Re: Broken link to OGNL

2013-08-05 Thread Lukasz Lenart
2013/8/2 Antonio Sánchez juntandolin...@gmail.com: In http://struts.apache.org/development/2.x/docs/ognl.html link to OGNL should be updated to be http://commons.apache.org/proper/commons-ognl/ The same for all pages where OGNL is linked. Done, it will take some time to sync Thanks

Re: sj:select value problem

2013-08-06 Thread Lukasz Lenart
2013/8/6 David Wang dwang...@hotmail.com: Hello, As a beginner in struts field, I send this question to see if I get any help. Here it is. I have a multiple dropdown menu. What I want to do is to pre-select related items based the value passed in. Specifically, I have html:select name=echo

Re: sj:select value problem

2013-08-07 Thread Lukasz Lenart
2013/8/7 David Wang dwang...@hotmail.com: value=%{patternKeyword2} / I don't know if this supports anything else than just a String. Please ask question on the user group or directly under the wiki page https://groups.google.com/forum/#!forum/struts2-jquery

Re: struts 1 to struts2 migration.

2013-08-07 Thread Lukasz Lenart
You can try to write your own ActionMapper which will extract request parameter action and base on that lookup for action. 2013/8/7 Arpan arpan.deb...@gmail.com: Anybody to help here... Thanks in Advance. On Tue, Aug 6, 2013 at 7:43 PM, Arpan arpan.deb...@gmail.com wrote: Hi All, We are

Re: conflict between message.properties for multiple Struts war files

2013-08-15 Thread Lukasz Lenart
All these WARs are part of the same EAR? Or they just separated WARs? You can define a constant struts.custom.i18n.resources in struts.xml for each WAR: constant name=struts.custom.i18n.resources value=app1-message/ and then put your app.title in app1-message.properties and so on for the rest.

Re: Spring Plugin

2013-08-26 Thread Lukasz Lenart
Yes 2013/8/26 Alireza Fattahi afatt...@yahoo.com: Hi, When we are using spring plugin, all the objects actions, interceptors, filters are managed by spring. Is it correct?! ~Regards, ~~Alireza Fattahi -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Struts1 to Struts2 Migration Support Query

2013-08-26 Thread Lukasz Lenart
Some people also setup two different applications (S1 and S2) and migrate step by step. 2013/8/15 vijayalayan.selva...@cognizant.com: Hi, Sincere Apologies for raising this issue with the entire team. I'm not aware of the process and not sure if I am raising this in the correct forum. Our

Re: HTML code not displaying in site documentation

2013-08-26 Thread Lukasz Lenart
Done 2013/8/12 Antonio Sánchez juntandolin...@gmail.com: http://struts.apache.org/development/2.x/docs/struts-2-spring-2-jpa-ajax.html El Martes, 30 de julio de 2013 20:55:20 Lukasz Lenart escribió: 2013/7/30 Antonio Sánchez juntandolin...@gmail.com: http://struts.apache.org/development/2.x

Re: conflict between message.properties for multiple Struts war files

2013-08-26 Thread Lukasz Lenart
2013/8/16 Omar Ngarigari ngarigar...@yahoo.com: No, All these WAR files are separate. I renamed the message.properties for App1 as you suggested app1-message.properties, but did not rename the other properties files. but the problem is still there when I run the App1. Strange, does it mean

Re: Spring Anotaction with Strust

2013-08-26 Thread Lukasz Lenart
2013/8/17 Alireza Fattahi afatt...@yahoo.com: Hi, May be this a spring question but please help me... Consider the example: http://struts.apache.org/release/2.2.x/docs/spring-and-struts-2.html I want to use spring anotation for defining the beans. So I make a EditServiceInMemory class as

Re: convetion maps parent actions too!

2013-08-26 Thread Lukasz Lenart
2013/8/19 Alireza Fattahi afatt...@yahoo.com: Hi, I am usging convetion. All my actions extended a base action like public class AccountAction extends MyBaseActionSupport{ } The convention maps the MyBaseActionSupport too. Is there any way we can avoid it. Is it an abstract class?

Re: Test with StrutsJUnit4TestCase

2013-08-26 Thread Lukasz Lenart
Please register an issue in JIRA 2013/8/17 Alireza Fattahi afatt...@yahoo.com: Hi, Regarding to page: http://struts.apache.org/release/2.2.x/docs/struts-2-junit-plugin-tutorial.html I could not find the getConfigPath() method in StrustTestCase class I searched the javadocs and I found that

Re: Test with StrutsJUnit4TestCase

2013-08-26 Thread Lukasz Lenart
2013/8/17 Alireza Fattahi afatt...@yahoo.com: I forgot to merntion: When I extend StrutsJUnit4TestCase the assertTrue method is not found ! You must import them statically Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Interceptor in various struts.xml

2013-08-27 Thread Lukasz Lenart
2013/8/28 Ken McWilliams ken.mcwilli...@gmail.com: Not looking that closely but both your packages extend struts-default if you want the interceptors/results of package default to be available to package M1 you should extend default on that package rather than struts-default... Exactly! How

Re: conflict between message.properties for multiple Struts war files

2013-08-29 Thread Lukasz Lenart
2013/8/26 Omar Ngarigari ngarigar...@yahoo.com: Yes, I am using the shared Stutrus2 libs jar files. Still strange as classloaders should be different ... Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ - To

Re: How to Mock getText(customerLabel) method in junit?

2013-08-29 Thread Lukasz Lenart
2013/8/29 Mohit Gupta motgu...@gmail.com: I am facing one issue while writing the junit of my struts 2 action class.My action class has following code snippet getText(customerLabel) While execution of junit i get below error though works fine thru application(i think Struts

Re: Escape expression in dynamic attribute in a tag

2013-08-29 Thread Lukasz Lenart
queryExpr='*$' +'{0}'* 2013/8/30 Jose L Martinez-Avial jlm...@gmail.com: Hi all, I'm pretty sure this is just a silly question, but I haven't been able to find anything. I have the following tag with some dynamics attribues: s:textfield name=userName3

Re: Escape expression in dynamic attribute in a tag

2013-08-30 Thread Lukasz Lenart
suggestions? 2013/8/30 Lukasz Lenart lukaszlen...@apache.org queryExpr='*$' +'{0}'* 2013/8/30 Jose L Martinez-Avial jlm...@gmail.com: Hi all, I'm pretty sure this is just a silly question, but I haven't been able to find anything. I have the following tag with some dynamics

Re: Why 2 URLs for the examples Struts-2.3.15.1 ?

2013-09-05 Thread Lukasz Lenart
The author - Bruce Phillips - just joined the project and he's moving the source code under Apache Svn - he also updates the source to work with the latest version of Struts 2. That's the reason of some duplications :-) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/4

Re: JavaScript errors on exception-handling.html

2013-09-05 Thread Lukasz Lenart
Yes, we know that and it's already solved - please check the Draft docs http://struts.apache.org/development/2.x/docs/exception-handling.html Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/5 Volker Krebs volker.kr...@abas.de: Hello, the Exception Handling Documentation

Re: Draft docs, Debugging Struts some Screen shot are missing

2013-09-05 Thread Lukasz Lenart
Done 2013/9/5 Lukasz Lenart lukaszlen...@apache.org: 2013/9/5 Chris christal...@yahoo.fr: Checking the Draft docs, see Debugging Struts http://struts.apache.org/development/2.x/docs/debugging-struts.html some Screen shot are missing, but found in wiki Argh there is a bug in SiteExporter

Re: Draft docs, Debugging Struts some Screen shot are missing

2013-09-05 Thread Lukasz Lenart
2013/9/5 Chris christal...@yahoo.fr: Checking the Draft docs, see Debugging Struts http://struts.apache.org/development/2.x/docs/debugging-struts.html some Screen shot are missing, but found in wiki Argh there is a bug in SiteExporter - instead of using - it just export as is :\ I will

Re: Understanding Struts2 Internals : Result Configuration

2013-09-06 Thread Lukasz Lenart
Hi, Just to clarify my comment on SO - action can directly return instance of Result instead of simple String. Then ActionInvocation.getResult will contain that result then. So actions are not limited just to Strings but can be used to dynamically build response. Regards -- Łukasz + 48 606 323

Re: Draft docs, Debugging Struts some Screen shot are missing

2013-09-10 Thread Lukasz Lenart
2013/9/7 Chris christal...@yahoo.fr: Thank you. I'm affraid the first one is still missing , after this phrase : Clicking on the link for the configuration browser will cause the Struts 2 framework to return this page to your browser. Screen shot Actions in namespace Yes, I know - trying

Re: Re: Framework provided text key resolving issue

2013-09-10 Thread Lukasz Lenart
Done, resolved! 2013/9/10 Christoph Nenning christoph.nenn...@lex-com.net: 2013/9/9 Christoph Nenning christoph.nenn...@lex-com.net: In this case the following happens: - struts2's algorithm is performed (search packages hierarchically) - for global resources the JVM tries the file

Re: Possible bug in URL validator

2013-09-10 Thread Lukasz Lenart
2013/9/5 Bruno Klava bkl...@gmail.com: Hi folks, in Struts 2.3.15 the form-close-validate.ftl template was updated to use the regex field, but there is no such field in com.opensymphony.xwork2.validator.annotations.UrlValidator neither a default value for it in

Re: Websphere specific config

2013-09-10 Thread Lukasz Lenart
Can you post more details about Websphere version? Thanks in advance -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/10 Christoph Nenning christoph.nenn...@lex-com.net: Dear List, to make struts2 work in Websphere, one has to set Websphere specific properties, you may want to

Re: Re: Websphere specific config

2013-09-10 Thread Lukasz Lenart
I'm going update it but I wanted to know the version - as you see it matters ;-) 2013/9/10 Christoph Nenning christoph.nenn...@lex-com.net: Can you post more details about Websphere version? Well, I'm a little embarrassed to say this. We still use the old WebSphere 6.5 in production. For

Re: Re: Websphere specific config

2013-09-10 Thread Lukasz Lenart
Done! https://cwiki.apache.org/confluence/display/WW/WebSphere Thanks! 2013/9/10 Lukasz Lenart lukaszlen...@apache.org: I'm going update it but I wanted to know the version - as you see it matters ;-) 2013/9/10 Christoph Nenning christoph.nenn...@lex-com.net: Can you post more details

Re: Trouble getting Archetype based project working

2013-09-11 Thread Lukasz Lenart
The README is a bit outdated (please register an issue), you can simple run: mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/ and select archetype from the list, I'm using it all the time (but with IDEA so I don't have a problems with Maven based projects) Regards -- Łukasz

Re: Redirecting to legacy action from struts 2 action ?

2013-09-12 Thread Lukasz Lenart
2013/9/11 Christoph Nenning christoph.nenn...@lex-com.net: it should work when you add namespace / to paramters: @Result( name = redirectTo, location = #parameters.redirectLocation, type = redirect, params={namespace, /} ) see this wiki page:

Re: question regarding dynamic number of form fields

2013-09-12 Thread Lukasz Lenart
It's because of restrictions in ParametersInterceptor - it doesn't allow keys with spaces as this can be potential malicious code. Check docs [1] and source [2] [1] http://struts.apache.org/development/2.x/docs/parameters-interceptor.html [2]

Re: Redirecting to legacy action from struts 2 action ?

2013-09-12 Thread Lukasz Lenart
2013/9/12 Mohit Gupta motgu...@gmail.com: Lukasz, is there any workaround so that i can get rid of namespace? As i mentioned if i hard code the url under location attribute, it works fine and does not add any namespace @Result(name = ComposeMessageCrudAction.REDIRECT_TO, location =

Re: Redirecting to legacy action from struts 2 action ?

2013-09-12 Thread Lukasz Lenart
2013/9/12 Mohit Gupta motgu...@gmail.com: Yes i am sure value is /customerhome.do?custIdId=200. Also do you mean that result mapping should be @Result(name = redirectTo, location = ${#parameters.redirectLocation} , type = redirect) }) instead of @Result(name = redirectTo, location =

Re: Struts2-jquery-grid-show on jboss as 6.0.final

2013-09-13 Thread Lukasz Lenart
No, it doesn't, rather this http://struts.apache.org/development/2.x/docs/convention-plugin.html#ConventionPlugin-JBoss Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/13 ngarigar...@yahoo.com: Hello everyone, I was able to deploy and run struts2-jquery-grid-showcase

Re: Issues with docs

2013-09-15 Thread Lukasz Lenart
Thanks, but it is already solved with Draft docs http://struts.apache.org/development/2.x/docs/unit-testing.html Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/16 Eric MacAdie emaca...@gmail.com: I don't know if this is the place to point this out, but it looks like the

Re: Custom ConfigurationProvider is not able to find result

2013-09-16 Thread Lukasz Lenart
It's hard to analyse such code, can you prepare a demo app on GitHub? And how you register your ConfigurationProvider? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/2 Ken McWilliams ken.mcwilli...@gmail.com: Probably something silly but the following is just a rough

Re: validator type=regex : param name is regex , not expression

2013-09-16 Thread Lukasz Lenart
Done, thanks for reporting! https://cwiki.apache.org/confluence/display/WW/Form+Validation+Using+XML 2013/9/16 Chris christal...@yahoo.fr: Hi Lukasz, Good example of regex in http://struts.apache.org/development/2.x/docs/form-validation-using-xml.html , and choose between JavaScript

Re: TextProvider, Validation and ModelDriven

2013-09-16 Thread Lukasz Lenart
There is a bug in DelegatingValidatorContext#makeTextProvider method - it should first try to use parent before creating new instance of TextProvider (base on TextProviderFactory but without injecting dependencies :\) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/16

Re: Issues with docs

2013-09-16 Thread Lukasz Lenart
) is a significant issue. On Sun, Sep 15, 2013 at 11:16 PM, Lukasz Lenart lukaszlen...@apache.orgwrote: Thanks, but it is already solved with Draft docs http://struts.apache.org/development/2.x/docs/unit-testing.html Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/16

Re: Providing excludeParams to ParametersInterceptor -- must expand defaultStack

2013-09-16 Thread Lukasz Lenart
2013/9/16 rgm str...@rgm.nu: If this is a duplicate message I apologize -- had some trouble subscribing. I'd like to provide some excludeParams to the ParametersInterceptor. I have two questions about this: 1) If I provide my own excludeParams element like this: interceptor-ref

Re: Providing excludeParams to ParametersInterceptor -- must expand defaultStack

2013-09-16 Thread Lukasz Lenart
docs updated https://cwiki.apache.org/confluence/display/WW/Interceptors#Interceptors-InterceptorParameterOverriding 2013/9/17 Lukasz Lenart lukaszlen...@apache.org: 2013/9/16 rgm str...@rgm.nu: If this is a duplicate message I apologize -- had some trouble subscribing. I'd like to provide

[IMPORTANT] Upgrade to Struts 2.3.15.1

2013-09-16 Thread Lukasz Lenart
If you still running Struts2 2.3.15.1 you should immediately upgrade! http://blog.trendmicro.com/trendlabs-security-intelligence/chinese-underground-creates-tool-exploiting-apache-struts-vulnerability/ Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Draft docs, Debugging Struts some Screen shot are missing

2013-09-17 Thread Lukasz Lenart
It's ok now, but it will be updated with next release - soon 2013/9/10 Lukasz Lenart lukaszlen...@apache.org: 2013/9/7 Chris christal...@yahoo.fr: Thank you. I'm affraid the first one is still missing , after this phrase : Clicking on the link for the configuration browser will cause

Re: How configure struts2 to get validation rules from Spring via @value

2013-09-17 Thread Lukasz Lenart
Code formatting? Maybe use some web service to present your code. Does system.properties is defined as a Struts 2 properties file? 2013/9/17 Alireza Fattahi afatt...@yahoo.com: We are using spring 3 and struts 2. We use spring @value annotation to get values from property files. We want to

Re: XWork injection intermittently skipped

2013-09-18 Thread Lukasz Lenart
2013/9/18 Patrick Savage patrick.sav...@3pillarglobal.com: We are using XWork's @Inject in Struts 2.3.1.2 to inject a DefaultObjectTypeDeterminer into a custom type converter. Since upgrading from Java 1.6.0_33 to 1.7.0_25, this injection does not occur about half the time. The other @Inject

Re: Are S2-018 and S2-019 serious / remotely exploitable?

2013-09-18 Thread Lukasz Lenart
2013/9/18 rgm str...@rgm.nu: Are S2-018 and S2-019 as serious as these issues that prompted 2.3.15.1? Should I rush to upgrade clients in the field to 2.3.15.2 as soon as it's available? S2-018 can be critical, it depends on how your application is structured - but it isn't a Remote Code

Re: validator type=regex : param name is regex , not expression

2013-09-18 Thread Lukasz Lenart
Sometime ago ... with 2.3.12. I have renamed expression to regex as right now you can define regexExpression as Ognl expression - there was name clash without renaming ;-) http://struts.apache.org/development/2.x/docs/version-notes-23120.html 2013/9/18 Chris christal...@yahoo.fr: Hello , Do

Re: XWork injection intermittently skipped

2013-09-20 Thread Lukasz Lenart
2013/9/19 Patrick Savage patrick.sav...@3pillarglobal.com: I don't think the setter overridding is the problem because I have also tried injecting into a different method (setObjectTypeDeterminerOverride) which didn't work either. Injecting the container doesn't work either because all

Re: How configure struts2 to get validation rules from Spring via @value

2013-09-20 Thread Lukasz Lenart
2013/9/20 Alireza Fattahi afatt...@yahoo.com: Let me ask this way. In below validation @IntRangeFieldValidator(type =ValidatorType.FIELD,min =10 is there any way we can read '10' from external resource files ! Directly not, but there is built-in support for expression, so you can use

Re: weakness or risky xml validation from server side ?

2013-09-21 Thread Lukasz Lenart
2013/9/21 Chris christal...@yahoo.fr: Don't you think , It could be a risk , using xml validation when the file properties have changed ? ( see also validator type=regex : param name is regex , not expression in archives ) It was one time change, maybe introduced in not the best way ;-)

Re: report.conversion.errors

2013-09-21 Thread Lukasz Lenart
Where did you find that information? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/21 Alireza Fattahi afatt...@yahoo.com: Hi, I want to stop xwork conversion from showing error during converting string to int. I found report.conversion.errors parameter which must be

[ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-21 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Struts 2.3.15.2 is available as a General Availability release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to

Re: Url rewriting of .action to .jsp

2013-09-22 Thread Lukasz Lenart
You should never ever allow to access JSPs directly! Thus can be potential security risk! What you want to achieve are two actions: - login-form.action to display login form - login.action to submit login form to and perform validation/user login Instead thinking about JSPs behind, think about

Re: S2: Not generating javascript validation

2013-09-22 Thread Lukasz Lenart
2013/9/22 Néstor Boscán nestor.bos...@tcs.com.ve: Hi s:form name=login method=post action=login!login.action validate=true Have you tried to use: login!login ? Attribute action expects action name, not how it is rendered (i.e. if you change default action extension to .html) Regards --

Re: report.conversion.errors

2013-09-22 Thread Lukasz Lenart
...@yahoo.com: I found it in java doc http://struts.apache.org/release/2.0.x/struts2-core/apidocs/com/opensymphony/xwork2/util/XWorkConverter.html ~Regards, ~~Alireza Fattahi From: Lukasz Lenart lukaszlen...@apache.org To: Struts Users Mailing List user

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-22 Thread Lukasz Lenart
2013/9/21 Yaragalla Muralidhar yaragallamur...@gmail.com: when ever we do modifications in the code the webapp is trying to reload automatically. at that point of time there is error happening and the webapp gets undeployed. Is this solved or still the problem exist? e.. I don't know

Re: S2: NullPointerException at AnnotationActionValidatorManager.lo adFile

2013-09-22 Thread Lukasz Lenart
Hi, Remove validators.xml - you don't need them. Can you post your whole page? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/21 Néstor Boscán nestor.bos...@tcs.com.ve: With the DTD solved the NullPointerException problem but I'm still not getting the javascript code

Re: S2: NullPointerException at AnnotationActionValidatorManager.lo adFile

2013-09-22 Thread Lukasz Lenart
On Sep 22, 2013, at 1:14 PM, Lukasz Lenart lukaszlen...@apache.org wrote: Hi, Remove validators.xml - you don't need them. Can you post your whole page? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/9/21 Néstor Boscán nestor.bos...@tcs.com.ve: With the DTD solved

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-22 Thread Lukasz Lenart
...@gmail.com: nice joke. Thanks. *Thanks and Regards,* Muralidhar Yaragalla. * * On Sun, Sep 22, 2013 at 10:42 PM, Lukasz Lenart lukaszlen...@apache.orgwrote: 2013/9/21 Yaragalla Muralidhar yaragallamur...@gmail.com: when ever we do modifications in the code the webapp is trying to reload

Re: S2: Not generating javascript validation

2013-09-22 Thread Lukasz Lenart
with login. Thanks for the help On Sunday, September 22, 2013, Lukasz Lenart lukaszlen...@apache.org wrote: 2013/9/22 Néstor Boscán nestor.bos...@tcs.com.ve: Hi s:form name=login method=post action=login!login.action validate=true Have you tried to use: login!login ? Attribute action

Re: Reload application in Tomcat, was: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-22 Thread Lukasz Lenart
failed due to previous errors Sep 23, 2013 12:19:15 AM org.apache.catalina.core.StandardContext reload INFO: Reloading Context with name [/ums] is completed *Thanks and Regards,* Muralidhar Yaragalla. * * On Sun, Sep 22, 2013 at 11:41 PM, Lukasz Lenart lukaszlen...@apache.orgwrote

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Lukasz Lenart
2013/9/22 Serdyn du Toit dutoi...@gmail.com: What I have now is as follows: package name=login namespace=/admin/login extends=default default-interceptor-ref name=any / action name=login-form result name=success/admin/login/login.jsp/result /action

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Lukasz Lenart
You cannot forward to actions Thanks, that was the idea that was missing from my understanding. Got it working the way I wanted in a minute :) Many thanks - appreciated :) Serdyn du Toit On Mon, Sep 23, 2013 at 8:47 AM, Lukasz Lenart lukaszlen...@apache.orgwrote: 2013/9/22 Serdyn du

Re: [ANN] Struts 2.3.15.2 GA release available - security fix

2013-09-23 Thread Lukasz Lenart
is that loginProcessLoginAction in jsp page is never be called. Could you help? Thanks, Emi On 09/21/2013 12:06 PM, Lukasz Lenart wrote: The Apache Struts group is pleased to announce that Struts 2.3.15.2 is available as a General Availability release.The GA designation is our highest quality grade

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Lukasz Lenart
2013/9/23 Paweł Wielgus poulw...@gmail.com: Hi all, I'm using DMI to call input method extensively, almost in every Edit*Action. I call it with ParamsPrepareParams stack. I fully understand that allowing DMI is a security problem. But maybe some kind of balance could be achevied. White

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Lukasz Lenart
2013/9/23 Volker Krebs volker.kr...@abas.de: Am 23.09.2013 11:05, schrieb Christoph Nenning: Just a hint: DMI can be dangerous and we think about removing it. That would force us to do heavy refactorings in all our applications. Removing DMI completely would break a lot of applications.

Re: Url rewriting of .action to .jsp

2013-09-23 Thread Lukasz Lenart
2013/9/24 Paweł Wielgus poulw...@gmail.com: One more side note, if i understand it wright, in my case (Edit input and execute methods) wildcard mapping would be better from framework perspective but it needs to be wriitten in xml configuration. Whereas DMI do not require me to write any

Re: Re: Url rewriting of .action to .jsp

2013-09-24 Thread Lukasz Lenart
2013/9/24 Christoph Nenning christoph.nenn...@lex-com.net: Yeah, I like the idea of strict-DMI. Right now I could not get it working with the convention pulgin, can investigate next week. That's why I want to have programmable configuration in XWork and then XML or Convention configuration via

Re: Re: Re: Url rewriting of .action to .jsp

2013-09-24 Thread Lukasz Lenart
2013/9/24 Christoph Nenning christoph.nenn...@lex-com.net: Yeah, I like the idea of strict-DMI. Right now I could not get it working with the convention pulgin, can investigate next week. That's why I want to have programmable configuration in XWork and then XML or Convention configuration

Re: Re: Re: Url rewriting of .action to .jsp

2013-09-24 Thread Lukasz Lenart
2013/9/24 Christoph Nenning christoph.nenn...@lex-com.net: But still: method:add works while !add does not. If you could prepare a small demo app, I'd like investigate that. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Re: Re: Url rewriting of .action to .jsp

2013-09-24 Thread Lukasz Lenart
2013/9/24 Christoph Nenning christoph.nenn...@lex-com.net: But still: method:add works while !add does not. If you could prepare a small demo app, I'd like investigate that. I can do so next week, sorry for the delay No problem, I'm busy too ;-) Regards -- Łukasz + 48 606 323 122

Re: XWork injection intermittently skipped

2013-09-25 Thread Lukasz Lenart
2013/9/24 Savage, Patrick patrick.sav...@3pillarglobal.com: How do you declare bean in struts.xml? As this is strange, if all injections are skipped, it must be something else. We don't actually declare the bean in struts.xml at all. Is that required in order for @Inject to inject Struts

Re: Translation of fieldName in annotated validations

2013-09-25 Thread Lukasz Lenart
2013/9/25 JOSE L MARTINEZ-AVIAL jlm...@gmail.com: Hello, I have an Action that receives a parameter *email *on a bean *event*. So basically the parameter is send to the server with name * event.email=jlmagcatgmail.com*'. The bean and the parameter are created correctly, so this part works

Re: About S2-019, is it safe to re-enable DMI ?

2013-09-25 Thread Lukasz Lenart
2013/9/25 Eric Chatellier chatell...@codelutin.com: Hi Just after updating struts to 2.3.15.2, all of ours applications stop working. Some of ours applications uses struts-convention-plugin, so only url can be used to acces action's methods. We are using a lot of url with !input methods,

Re: Translation of fieldName in annotated validations

2013-09-25 Thread Lukasz Lenart
2013/9/25 JOSE L MARTINEZ-AVIAL jlm...@gmail.com: I have javascript controls for the client-side validation, but we also want to implement server-side validation. I'm not criticizing the framework, I really really like it. I'm just wondering if the validations could be a little more flexible

Re: About S2-019, is it safe to re-enable DMI ?

2013-09-30 Thread Lukasz Lenart
2013/9/25 Eric Chatellier chatell...@codelutin.com: Ok, but i mean how is it possible to not use DMI with struts convention plugin. We prefer the convention over configuration approch. As Bruce already mentioned - DMI isn't needed by the Convention Plugin - it doesn't base on it at all. Of

Re: Translation of fieldName in annotated validations

2013-09-30 Thread Lukasz Lenart
2013/9/25 JOSE L MARTINEZ-AVIAL jlm...@gmail.com: Well, I have found a workaround that is not much of a hacking. The annotations has a messageParameters that is evaluated against the valuestack. Since the action is in the valuestack, and it implements ActionSupport,I can pass a parameter that

Re: Re: Re: Url rewriting of .action to .jsp

2013-09-30 Thread Lukasz Lenart
a view. It's pretty obvious how conventions could determine the white listed methods from this. On Tue, Sep 24, 2013 at 3:21 AM, Lukasz Lenart lukaszlen...@apache.orgwrote: 2013/9/24 Christoph Nenning christoph.nenn...@lex-com.net: But still: method:add works while !add does not. If you

Re: S2: Using HTTPS, when I redirect, I get HTTP

2013-09-30 Thread Lukasz Lenart
2013/9/30 Néstor Boscán nestor.bos...@tcs.com.ve: I have an application that runs on weblogic 10.3.6 and struts 2.3.8. The weblogic is behind a loadbalancer that does https to http translation. When the application uses a redirect it will use HTTP instead of the original HTTPS protocol. Is

Re: S2: Not generating javascript validation

2013-09-30 Thread Lukasz Lenart
2013/9/30 Néstor Boscán nestor.bos...@tcs.com.ve: action name=login class=loginAction method=login Why do you use login!login as action login is already defined to use login method? So login.action is the same as login!login.action (just drop .action) Regards -- Łukasz + 48 606 323 122

Re: strict DMI, was: Url rewriting of .action to .jsp

2013-09-30 Thread Lukasz Lenart
2013/9/30 Christoph Nenning christoph.nenn...@lex-com.net: Finally I continued with my strict DMI tests. While creating a sample app I discovered that the above was wrong. It is a CSRF protection interceptor in the other app which made me think that !add was blocked by the framework. But I

Re: Passing input from jsp to action class

2013-10-01 Thread Lukasz Lenart
2013/10/1 Kevin Peterson qh.res...@gmail.com: Hi, In my front end, i am allowing user to create and save multiple number of entries to a table at the same time. For now i am sending this input to Java class in form of string which i am creating at the time of save. But if table size is

Re: Re: strict DMI, was: Url rewriting of .action to .jsp

2013-10-01 Thread Lukasz Lenart
Done https://cwiki.apache.org/confluence/display/WW/Action+Configuration#ActionConfiguration-DynamicMethodInvocation 2013/10/1 Christoph Nenning christoph.nenn...@lex-com.net: Would you please have a look at the sample app and tell me what I am doing wrong?

Re: S2: Using HTTPS, when I redirect, I get HTTP

2013-10-01 Thread Lukasz Lenart
2013/10/1 Néstor Boscán nestor.bos...@tcs.com.ve: This one: result name=cambiarPassword type=redirectcambioPassword!input.action/result It's a normal redirect (not redirectAction) so you can use https://host/cambioPassword!input.action Other option is to develop your own

Re: S2: Using HTTPS, when I redirect, I get HTTP

2013-10-01 Thread Lukasz Lenart
2013/10/1 Paul Benedict pbened...@apache.org: Hmm. Well, there's a couple issues to consider here. 1) When you're behind a load balancer, the machine name (domain) you're running on may not be the domain that's fronted to the public. For example, the user might be accessing www.company.org

<    7   8   9   10   11   12   13   14   15   16   >