Re: Problems configuring own error pages for status codes manually set

2014-02-17 Thread Lukasz Lenart
Maybe trying setting struts.handle.exception to false. 2014-02-17 14:58 GMT+01:00 Christoph Nenning : > Instead of response.sendError() you can try to use a struts http header > result: > > > http://struts.apache.org/development/2.x/docs/httpheader-result.html > > > hope that helps > > > Regards,

Re: Struts wiki down? HTTP 503

2014-02-17 Thread Lukasz Lenart
I have sent request to INFRA by till now no answer :( 2014-02-17 19:46 GMT+01:00 Tommy Pham : > Hi folks, > > Subject said it all. > > Service Temporarily Unavailable > > The server is temporarily unable to service your request due to maintenance > downtime or capacity problems. Please try again l

Re: Need help with Annotations Tutorial @ cwiki

2014-02-18 Thread Lukasz Lenart
2014-02-19 6:21 GMT+01:00 Tommy Pham : > package local.workgroup.tutorial.struts2.actions; You are mixing the same locators and Struts doesn't know how to handle this. I mean it knows but it will create additional namespace /actions. Below you have default locators, change them just to action,acti

[ANN] [SECURITY] Immediately upgrade commons-fileupload to version 1.3.1

2014-02-20 Thread Lukasz Lenart
The Apache Struts Team recommends to immediately upgrade your Struts 2 based projects to use the latest released version of Commons FileUpload library, which is currently 1.3.1. This is necessary to prevent your publicly accessible web site from being exposed to possible DoS attacks [1] [2]. Your

Re: Assign html id to token

2014-02-25 Thread Lukasz Lenart
It isn't supported but we accept patches :-) In that case you can only reference those values via name. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2014-02-24 10:44 GMT+01:00 Alireza Fattahi : > I try to ready token via javascript. > > The will not generate the id ! and still

Re: globaly escapeAmp

2014-02-25 Thread Lukasz Lenart
2014-02-24 10:41 GMT+01:00 Alireza Fattahi : > Is there any way to globally disable escape when generating url with s:url ?! > I found some one mentioned this: > > There is no such option in Struts - maybe someone did a custom interceptor or org.apache.struts2.components.UrlRenderer Regards --

Re: StrutsTestCase issues with basic jsp via convention plugin

2014-02-25 Thread Lukasz Lenart
Can you publish the whole project at GitHub instead of the gist? 2014-02-23 18:35 GMT+01:00 John Patrick : > Hi, > > Having some issues around automated testing using struts2-junit-plugin > accessing a jsp via struts2-convention-plugin. > > Basically the following two url's; > http://struts.apache

Re: globaly escapeAmp

2014-02-25 Thread Lukasz Lenart
2014-02-25 14:48 GMT+01:00 Alireza Fattahi : > I found this in some pages, and thought may be the option is there: > > http://code.google.com/p/struts2-jquery/issues/detail?id=51‎ > > https://github.com/Dinous/d3kode/blob/master/src/struts.xml‎ It looks like something jQuery Plugin specific Rega

Re: Rest + JSON

2014-02-25 Thread Lukasz Lenart
http://struts.apache.org/release/2.3.x/docs/json-plugin.html#JSONPlugin-CustomizingSerializationandDeserialization ? 2014-02-25 15:09 GMT+01:00 Felipe Lorenz : > Hello, > > I have been working on projects with Struts2 + Rest + JSON. > > It is just perfect. > > But, there is always a but, when I us

Re: Rest + JSON

2014-02-25 Thread Lukasz Lenart
2014-02-25 19:08 GMT+01:00 Felipe Lorenz : > Hi, > > I was not clear with my doubt. I dont´t want to use json-plugin, since > rest-plugin already has a json solution. > > I wanna try to use 100% of rest-plugin json solution and, at same time, keep > the control over the data is returned. I think t

Re: Validation with DefaultActionValidatorManager throws NullPointerExeption

2014-02-26 Thread Lukasz Lenart
2014-02-26 13:35 GMT+01:00 Thomas Hermann : > Hello, > > In a JUnit-Test and in a Ajax-Server I try to validate an Object with > com.opensymphony.xwork2.validator.DefaultActionValidatorManager (Version > 2.3.15.3). > > The MyObject-validation.xml file is provided in the same directory as the > MyOb

Re: Rest + JSON

2014-02-26 Thread Lukasz Lenart
You can always share your work as a patch or a plugin ;-) 2014-02-26 14:00 GMT+01:00 Felipe Lorenz : > Thanks Lukasz, I think I´ll create a CustomContentTypeHandler. > > Em 26/02/2014 04:21, Lukasz Lenart escreveu: >> >> 2014-02-25 19:08 GMT+01:00 Felipe Lorenz : >>

Re: Validation with DefaultActionValidatorManager throws NullPointerExeption

2014-02-26 Thread Lukasz Lenart
2014-02-26 16:59 GMT+01:00 Thomas Hermann : > Do you simply mean: > > - > DefaultActionValidatorManager validator = new > DefaultActionValidatorManager(); > validator.setFileManagerFactory(new DefaultFileManagerFactory()); > validator.validate(request

Re: Rest + JSON

2014-02-26 Thread Lukasz Lenart
esults, using ContentTypeHandler, as in the > json-plugin. > > There is a way to read some parameter coming from the request by the > ContentTypeHandler? > > Thanks, > Felipe Lorenz > > Em 26/02/2014 10:02, Lukasz Lenart escreveu: >> >> You can alwa

Re: S2 Convention Plugin broken on Tomcat 8?

2014-03-02 Thread Lukasz Lenart
Looks like a bug :\ Can you register a JIRA issue and attach sample project? Thanks in advance! 2014-03-02 21:22 GMT+01:00 Tommy Pham : > Hi folks, > > Is anyone having problem getting S2 2.3.16 Convention Plugin to work on > Tomcat 8.0.3? > > I used the tutorial [1] and built the war OK. Deploy

Re: S2 Convention Plugin broken on Tomcat 8?

2014-03-03 Thread Lukasz Lenart
; If I made a mistake in the labeling or selection of choices, please let me >> know. >> >> Kind regards, >> Tommy >> >> >> >> On Sun, Mar 2, 2014 at 12:28 PM, Lukasz Lenart >> wrote: >> >>> Looks like a bug :\ Can you register a J

Re: S2 Convention Plugin broken on Tomcat 8?

2014-03-03 Thread Lukasz Lenart
Confirmed, but in Tomcat 8 https://issues.apache.org/bugzilla/show_bug.cgi?id=56125 2014-03-03 9:11 GMT+01:00 Lukasz Lenart : > Thanks! As I mentioned in the JIRA ticket it looks like a problem in > Tomcat 8, already asked them about that > > http://markmail.org/thread/opktu6xqketvw

Re: Need help w/ struts+spring+jpa tutorial

2014-03-05 Thread Lukasz Lenart
Can you post the whole stacktrace? Maybe ClassNotFound isn't the root case 2014-03-01 8:06 GMT+01:00 Tommy Pham : > Hi, > > I'm trying to follow the tutorial mentioned in subject at: > > http://struts.apache.org/release/2.3.x/docs/struts-2-spring-2-jpa-ajax.html > > I got it to build the war OK so

[ANN] Struts 2.3.16.1 GA release available - security fix

2014-03-06 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Struts 2.3.16.1 is available as a "General Availability" release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed t

Re: Why do I get this XHTML validation errors?

2014-03-06 Thread Lukasz Lenart
Unreadable :\ 2014-03-06 13:35 GMT+01:00 Fredrik Andersson : > Hello guys! > I trying to produce a app that renders in XHTML. "-//W3C//DTD XHTML 1.0 Transitional//EN" > "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd";> xmlns="http://www.w3.org/1999/xhtml";> > How ever I got a form looki

Re: [Full-disclosure] [ANN] Struts 2.3.16.1 GA release available - security fix

2014-03-06 Thread Lukasz Lenart
No, rather no. You gain access to ClassLoader. 2014-03-06 16:43 GMT+01:00 Tim : > >> This release includes important security fixes: >> - S2-020 - ClassLoader manipulation via request parameters > > What is the ultimate impact of this manipulation? Another RCE bug? > > tim --

Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-07 Thread Lukasz Lenart
YooHoo! That's suppose to work template inheritance! 2014-03-07 21:03 GMT+01:00 Fredrik Andersson : > Hello guys! > > I think you solved it! > > I put a new file "hidden.ftl" in my resources-folder (I use maven with > eclipse): > resources/template/xhtml/hidden.ftl > > The content in hidden.ftl i

Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-07 Thread Lukasz Lenart
Yes, that would be the best solution. 2014-03-07 22:02 GMT+01:00 Paul Benedict : > We need a JIRA ticket to solve this permanently. > > > On Fri, Mar 7, 2014 at 2:37 PM, Lukasz Lenart wrote: > >> YooHoo! That's suppose to work template inheritance! >> >&

Re: URL 'https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples' doesn't exist

2014-03-10 Thread Lukasz Lenart
We're migrating them to git :-) https://issues.apache.org/jira/browse/INFRA-7401 2014-03-10 20:07 GMT+01:00 Chris : > Hello, > > I just wanted to signal the error tonight with svn URL > > svn: E17: ERROR the URL > 'https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples' > doe

Re: URL 'https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples' doesn't exist

2014-03-10 Thread Lukasz Lenart
https://git-wip-us.apache.org/repos/asf?p=struts-examples.git 2014-03-10 21:34 GMT+01:00 Lukasz Lenart : > We're migrating them to git :-) > > https://issues.apache.org/jira/browse/INFRA-7401 > > 2014-03-10 20:07 GMT+01:00 Chris : >> Hello, >> >> I just wante

Re: URL 'https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples' doesn't exist

2014-03-11 Thread Lukasz Lenart
2014-03-11 11:30 GMT+01:00 Chris : > We're migrating them to git :-) > > OK THanks. > And may i ask what tools do you recommend ? > I used to Sliksvn with WIndows XP ( no Netbeans plugin , nor Eclipse plugin ) git command line client :-) or sometime http://sourcetreeapp.com/ Regards -- Łukasz

Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-12 Thread Lukasz Lenart
ted a bug about the first thing. If you need me to >> do it I would love to help but how do I do it? Do I need some account to >> some jira-server? >> >> Best regards >> Fredrik >> >> >>> From: lukaszlen

Re: Error message's is not XHTML valid

2014-03-12 Thread Lukasz Lenart
All these errorFor's are used to identify tags which present error messages and allow to delete them using JS. I'm not sure but maybe XHTML allows custom attributes, if not we can use id with prefix, ie: http://www.lenart.org.pl/ 2014-03-10 19:49 GMT+01:00 Fredrik Andersson : > Hello guys! > > I m

Re: Dispatcher attempts to write on the response after it has been commited

2014-03-17 Thread Lukasz Lenart
As from 2.3.17 you will be able to write your own DispatcherErrorHandler https://issues.apache.org/jira/browse/WW-3887 https://cwiki.apache.org/confluence/display/WW/Dispatcher 2014-03-18 6:06 GMT+01:00 JOSE L MARTINEZ-AVIAL : > Hi, > I'm using Struts 2.3.16.1 with Weblogic 10.3. I recently not

Re: Dispatcher attempts to write on the response after it has been commited

2014-03-17 Thread Lukasz Lenart
2014-03-18 7:01 GMT+01:00 Jose L Martinez-Avial : > Well, that's a good thing, but anyway I think the default dispatcher should > avoid this kind of error. The problem is (as far I can recall) that it's a Weblogic specific situation. I mean, Tomcat doesn't throw exception when user aborts opening

Re: A problem on Iterator tag.

2014-03-18 Thread Lukasz Lenart
Great! Fill a JIRA ticket with the patch! 2014-03-14 10:57 GMT+01:00 K OSSUser : > Hi, > > I'm using Struts2.3.15 and I had a problem then tested a simple jsp. > > I expected "1, 2, , 3," but the result was "1, 2, 2, 3,". > > Test.jsp > -

Re: struts examples in a security manager

2014-03-18 Thread Lukasz Lenart
Nope :-) But I would like to hear all your questions :-) 2014-03-17 16:40 GMT+01:00 Cameron Morris : > Anyone ever got the struts examples running in a security manager? I've > burned a month trying to do it and I've a hundred questions about it. -

Re: Dispatcher attempts to write on the response after it has been commited

2014-03-18 Thread Lukasz Lenart
2014-03-18 15:21 GMT+01:00 Paul Benedict : > Lukasz, the ServletResponse interface does contain an isCommitted() method. > We can avoid this situation by checking it first. Great! Fixing this is piece of cake :-) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Antwort: RE: Running Struts 2 Project in WebSphere Application Serve 7.0.0.19

2014-03-24 Thread Lukasz Lenart
2014-03-24 23:23 GMT+01:00 manohar : > com.ibm.ws.webcontainer.webapp.WebApp logError SRVE0293E: [Servlet > Error]-[Attribute "class" must be declared for element type "validator".]: Here you have the answer. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/

Re: Required attribute on s:select & s:file

2014-03-27 Thread Lukasz Lenart
required was renamed to requiredLabel https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.12.0 2014-03-26 22:37 GMT+01:00 : > We upgraded from struts 2.3.8 to 2.3.16. > Now any page that has a s:select or s:file tag with required="true" does not > display. > > s:textfield works fin

Re: Request parameters need corresponding getters/setters in action?

2014-03-27 Thread Lukasz Lenart
2014-03-27 21:41 GMT+01:00 Manuel López Blasi : > Hello everybody, > > i'm in the process or migrating our application from struts 2.8.1 to the > latest 2.3.16.1 Ga. > After some intense debugging and researching i have come to the conclusion > that request parameters passed thru url are required >

Re: Broken Compatibility issue with ParameterNameAware when upgrading

2014-03-28 Thread Lukasz Lenart
Have you followed the link of the issue? From what version do you migrate to 2.3.16? 2014-03-28 8:30 GMT+01:00 thomas.hill : > Hello, > > i have the same problem. > Since version 2.3.16 (and 2.3.16.1 too) a lot of my parameters will not > accepted. > I have a lot of paramNames with a dot in name l

Re: Broken Compatibility issue with ParameterNameAware when upgrading

2014-03-28 Thread Lukasz Lenart
Yes, hope in next week ;-) 2014-03-28 9:34 GMT+01:00 thomas.hill : > Hi, > > sorry for duplicate, i thought i had deleted the first post. > > I would migrate from version 2.3.15.3 to 2.3.16.1 > I did not read the issue because the system was in maintenance, but now i > have read and it seams, that

Re: URL 'https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples' doesn't exist

2014-04-02 Thread Lukasz Lenart
-examples-to-Git-td5715078.html#a5715467 > > Thanks, > > Chris > Le Mardi 1 avril 2014 18h46, Chris a écrit : > > Thanks > > Regards, > > Chris > > > > Le Mardi 11 mars 2014 11h48, Lukasz Lenart a écrit : > > 2014-03-11 11:30 GMT+01:00 Chris : >

Re: Not calling setters when callchaining into fields and using complex type, bug or feature?

2014-04-03 Thread Lukasz Lenart
Do you have converters for ComplexType and DifferentComplexType registered? 2014-04-03 11:19 GMT+02:00 Fabian Richter : > Hey, > > not sure this is a Bug or a Feature, but I ran into the following troubles, > someone might be able to explain: > > class ComplexType { > private DifferentComp

Re: Not calling setters when callchaining into fields and using complex type, bug or feature?

2014-04-03 Thread Lukasz Lenart
icitly. > > Thanks for your support! > > Am 04.04.2014 07:16, schrieb Lukasz Lenart: >> >> Do you have converters for ComplexType and DifferentComplexType >> registered? >> >> 2014-04-03 11:19 GMT+02:00 Fabian Richter : >>> >>> Hey, >

Re: Not calling setters when callchaining into fields and using complex type, bug or feature?

2014-04-04 Thread Lukasz Lenart
Aha... ok :-) 2014-04-04 9:06 GMT+02:00 Fabian Richter : > I was using my own converter extending DefaultTypeConverter, but was under > the impression that exceptions thrown inside the converter will be caught by > the default exception handler. > > Am 04.04.2014 08:58, schrie

Re: struts 2.3.17

2014-04-04 Thread Lukasz Lenart
Next week, I haven't had time to work on it this week 2014-04-04 20:16 GMT+02:00 Manuel López Blasi : > By any chance does anybody has an estimate of when struts version 2.3.17 > will be available? > Thanks in advance!! > > El 04/04/2014 4:08, Lukasz Lenart escri

Re: building source

2014-04-05 Thread Lukasz Lenart
Strange, it supposes to work on JDK6 and JDK7, doesn't compile on JDK8 because of JavaDocs errors (but it's a plan for 2.5 ;-)) The only problem now is that you must skip assembly compilation by mvn clean install -PskipAssembly 2014-04-04 23:16 GMT+02:00 Serdyn du Toit : > Hi, > > How do I build

Re: Date widget use with simple theme

2014-04-05 Thread Lukasz Lenart
is a part of Dojo plugin [1], so you must include it and use as well, then you can use the tag as [1] http://struts.apache.org/release/2.3.x/docs/datetimepicker.html 2014-04-05 7:44 GMT+02:00 Patrick Kelly : > Hi - I am migrating a Webwork application to Struts 2 and am trying to > figure out

Re: building source

2014-04-05 Thread Lukasz Lenart
2014-04-05 15:19 GMT+02:00 Serdyn du Toit : > Got it working :) > mvn clean install -DskipAssembly=true Yes, sorry for that :-) Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ - To unsubscribe, e-mail: user-unsubs

Call 4 Plugins

2014-04-06 Thread Lukasz Lenart
Hi, Can you post links to all the plugins you are using which aren't included in Struts itself? Me: http://jcaptcha4struts2.googlecode.com/ Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ - To unsubscribe, e-mail

Re: datetimepicker used in conjunction with theme=simple form

2014-04-07 Thread Lukasz Lenart
Do you have tag in your jsp? Do you see any JavaScript errors? 2014-04-07 10:03 GMT+02:00 Patrick Kelly : > Hi, I am head butting a virtual brick wall trying to get the datetimepicker > dojo widget to work with a theme=simple form. > > I am in the middle of upgrading a webwork app to struts2 2.3.

Re: datetimepicker used in conjunction with theme=simple form

2014-04-07 Thread Lukasz Lenart
**Dynamics* > > E: patrick.ke...@riverdynamics.com <mailto:patrick.ke...@riverdynamics.com> > W: www.riverdynamics.com <http://www.riverdynamics.com/> > > On 7/04/2014 7:05 PM, Lukasz Lenart wrote: >> >> Do you have tag in your jsp? Do you see any JavaScript errors? >> >

Re: datetimepicker used in conjunction with theme=simple form

2014-04-07 Thread Lukasz Lenart
> "Attribute theme invalid for tag datetimepicker according to tld" > > Patrick Kelly > > PatrickKelly > PrincipalConsultant > *River**Dynamics* > > E: patrick.ke...@riverdynamics.com <mailto:patrick.ke...@riverdynamics.com> > W: www.riverdynamics.com <htt

Re: I would like help with the template theme changes in 2.3.16.1

2014-04-09 Thread Lukasz Lenart
Can you prepare a small Maven based demo app? 2014-04-09 14:00 GMT+02:00 Stuart James : > Hi, > I am developing an application which has been predominantly written with > Struts2 version 2.3.15.3 and the struts2-jquery-plugin version 3.6.1. > I have recently upgraded to Struts2 version 2.3.16.1 a

Re: I would like help with the template theme changes in 2.3.16.1

2014-04-09 Thread Lukasz Lenart
And register an issue? 2014-04-09 14:10 GMT+02:00 Lukasz Lenart : > Can you prepare a small Maven based demo app? > > 2014-04-09 14:00 GMT+02:00 Stuart James : >> Hi, >> I am developing an application which has been predominantly written with >> Struts2 version 2.3.

Re: No action instance for path /welcomeAction could be created

2014-04-09 Thread Lukasz Lenart
What's the problem? Do you see anything in the logs? 2014-04-09 18:24 GMT+02:00 Etingin, Eugene : > Dear Struts Experts > > > Can somebody please help me with this problem? I am deploying war file on > Weblogic. The application is done with Struts, > > struts-config > > > > path="/resources/js

Re: No action instance for path /welcomeAction could be created

2014-04-09 Thread Lukasz Lenart
t; > Eugene Etingin > > 212-815-3393 Land line > 646-886-7790 Cell > > -----Original Message- > From: Lukasz Lenart [mailto:lukaszlen...@apache.org] > Sent: Wednesday, April 09, 2014 2:15 PM > To: Struts Users Mailing List > Subject: Re: No action instance for path /

Re: Dojo to jquery migration

2014-04-14 Thread Lukasz Lenart
I think it's better to ask here https://code.google.com/p/struts2-jquery/ 2014-04-10 9:44 GMT+02:00 Patrick Kelly : > Hi - I am migrating an old Webwork application across to Struts 2.3 and > there is pretty much just 1 item left to complete. Which is to migrate some > old webwork/dojo stuff acros

Re: I would like help with the template theme changes in 2.3.16.1

2014-04-14 Thread Lukasz Lenart
che.org/jira/browse/WW-4319 > and included an demo app. > Please let me know if there are any problems with the demo. > > Thanks > Steve > - Original Message - > From: Lukasz Lenart > To: Struts Users Mailing List ; Stuart James > > Cc: > Sent: Wednesday,

Re: Detect abuse of parameterInterceptor / Zero-Day issue?

2014-04-24 Thread Lukasz Lenart
You will get WARN in devMode or DEBUG log entry from ParametersInterceptor or you can use access_log from Apache - it all depends on setup of your application. 2014-04-24 20:25 GMT+02:00 rgm : > I'd like to begin monitoring the server's request log and system logs to be > able to detect abuse of t

Re: CRUD through RESTful

2014-04-24 Thread Lukasz Lenart
2014-04-24 20:16 GMT+02:00 Antonio Sánchez : > Hello. > > 1. Nowadays: Is RESTful the most recommended approach for implementing CRUD > applications with Struts2? Or is it equivalent to old CRUD style? What are > you doing in your new projects? No, if your application is a simple CRUD I'd recommen

Re: CRUD through RESTful

2014-04-24 Thread Lukasz Lenart
Wiki updated https://cwiki.apache.org/confluence/display/WW/REST+Plugin - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org

Re: CRUD through RESTful

2014-04-25 Thread Lukasz Lenart
2014-04-25 10:28 GMT+02:00 Antonio Sánchez : > 1. So, RESTful plug-in is just for implementing web services in Struts2, > isn't it? Basically yes, how you will use it is up to you :-) > 2. IMHO, a more detailed documentation would help newbies understand how-to > use REST plugin. Specially, expla

Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical)

2014-04-25 Thread Lukasz Lenart
You can create one abstract package and all other packages can inherit from it - the same as you inherit from "tiles-default" 2014-04-25 15:52 GMT+02:00 : > Hello List, > > Need your confirmation for [1] mitigation. For example, package: p1, p2... > pN, for each package, I should do the following

Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical)

2014-04-25 Thread Lukasz Lenart
2014-04-25 16:48 GMT+02:00 Emi Lu : > On 04/25/2014 10:23 AM, Lukasz Lenart wrote: >> >> You can create one abstract package and all other packages can inherit >> from it - the same as you inherit from "tiles-default" > > So, another way to do the change w

Re: struts 2.3.17

2014-04-25 Thread Lukasz Lenart
Let me finish 2.3.16.2 ;-) 2014-04-26 6:08 GMT+02:00 Amol Ghotankar : > Any update here? > > > > On Sat, Apr 5, 2014 at 1:54 AM, Lukasz Lenart wrote: > >> Next week, I haven't had time to work on it this week >> >> 2014-04-04 20:16 GMT+02:00 Manuel Lópe

Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical)

2014-04-25 Thread Lukasz Lenart
2014-04-25 17:39 GMT+02:00 Emi Lu : > On 04/25/2014 10:56 AM, Lukasz Lenart wrote: >> >> You can create one abstract package and all other packages can inherit >> from it - the same as you inherit from "tiles-default" >>> >>> So, another way to do

[ANN] Struts 2.3.16.2 GA release available - security fix

2014-04-26 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Struts 2.3.16.2 is available as a "General Availability" release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed t

Re: struts 2.3.17

2014-04-28 Thread Lukasz Lenart
truts/pull/11 Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2014-04-28 11:23 GMT+02:00 Markus Fischer : > Hi Łukasz and all. > > Am 26.04.2014 06:24, schrieb Lukasz Lenart: >> Let me finish 2.3.16.2 ;-) > > First of all, many thanks to the whole team for getting

Re: [ANN] Struts 2.3.16.2 GA release available - security fix

2014-04-28 Thread Lukasz Lenart
2014-04-28 17:55 GMT+02:00 Dave Evans : > Hello, > > For users who have a functioning 2.3.16.1 site, is it sufficient to copy in > the struts-core and xwork-core jar files, in order to complete the upgrade > to 2.3.16.2? It seems that way from looking at the git logs. Basically yes, other jars did

Re: How to Resolve excludeParams Restriction when Upgrading to Struts 2.3.16.2

2014-04-29 Thread Lukasz Lenart
2014-04-29 3:59 GMT+02:00 John Boyer : > Hello: > > I'm upgrading from Struts 2.3.4.1 to Struts 2.3.16.2. I've found that some of > my actions no longer work due to the excludeParams restrictions. > > For example, I get the following warning: > > ...ParametersInterceptor.warn:56 - Parameter [actio

Re: Issues with latest struts upgrade:

2014-04-29 Thread Lukasz Lenart
You missed three versions in between, please read version notes of each. 2014-04-29 15:45 GMT+02:00 satish jupalli : > Hi, > > > We are facing issue with the latest struts upgrade. (From struts-2.3.15.1 > to struts-2.3.16.2). Did the latest patch changed anything? Everything was > running fine bef

Re: How to Prevent Double Submits After Upgrading to Struts 2.3.16.2

2014-04-29 Thread Lukasz Lenart
Switch off devMode and check again. 2014-04-30 2:08 GMT+02:00 John Boyer : > Martin et. al.: > > Yes, the examples seem to run fine. And my code worked fine in version > 2.3.4.1. However, after upgrading from Struts 2.3.4.1 to 2.3.16.2, I get the > following error: > > 2014-04-29 15:28:56,950 WA

Re: Make ${} operator XSS safe in Struts 2 (same as tapestry)

2014-04-29 Thread Lukasz Lenart
2014-04-29 15:55 GMT+02:00 Alireza Fattahi : > Hi, > > As mentioned in > http://www.disasterarea.co.uk/blog/xss-vulnerabilities-in-web-frameworks-2/ > The ${} is not xss safe in struts 2 while it is safe in tapestry 5. > I am not a Tapestry guy, but I want to know if above is correct. > As far as

Re: Struts 1.x vulnerability to S2-020

2014-04-30 Thread Lukasz Lenart
2014-04-26 12:41 GMT+02:00 Andrew Brennan : > Hi, > > Can anyone confirm/deny if Struts 1 is vulnerable to this problem? There was an announcement published on this list. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ --

Re: Unable to Find FreeMarker Template in Struts 2.3.16.2

2014-05-02 Thread Lukasz Lenart
This is issue is already solved in upcoming 2.3.18 version [1], the simplest solution is to move template folder to be on classpath not under webapp folder, if you use Maven then move template folder from src/main/webapp to src/main/resources [1] https://issues.apache.org/jira/browse/WW-4260 Reg

Re: Grouping same type validators

2014-05-05 Thread Lukasz Lenart
It isn't supported and I don't see simple way to achieve this. 2014-05-03 23:33 GMT+02:00 Antonio Sánchez : > Hello. > > in a middle sized application there may be hundreds of required fields, and > maybe dozens of some other validator type, which are all very verbose to > define. > > For instance

Re: want to get help with an issue in upgrading struts to 2.3.16.2

2014-05-05 Thread Lukasz Lenart
Did you upgrade all the libs? 2014-05-05 10:17 GMT+02:00 liangyu105 : > Hello, > > I'm upgrading from Struts 2.3.15.1 to Struts 2.3.16.2. but encounter a > problem which i have search on web a lot of time but still don't have a > clue , i am a newer in struts , would you kindly help me to solve

Re: Grouping same type validators

2014-05-05 Thread Lukasz Lenart
Sure thing, but it will be rather postponed till 2.5 2014-05-05 13:31 GMT+02:00 Antonio Sánchez : > Would it worth the while to post an enhancement request? > > El lun 05 may 2014 10:17:09 CEST, Lukasz Lenart escribió: >> >> It isn't supported and I don't

Re: Struts zero-day vulnerability

2014-05-05 Thread Lukasz Lenart
Here you have more details [1] and just to point it out - Struts 1 reached EOL [2] and no further development is expected! Consider migration to Struts2 or any other modern framework. [1] http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Protect-your-Struts1-applications/ba-p/6463188#.U2d8va

[ANN] Struts 2.3.16.3 GA release available - security fix

2014-05-05 Thread Lukasz Lenart
The Apache Struts group is pleased to announce that Struts 2.3.16.3 is available as a "General Availability" release.The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed t

Re: Struts2.3.18 Released?

2014-05-06 Thread Lukasz Lenart
Added remark that this version is not yet released (but will be soon ;-) 2014-05-06 16:37 GMT+02:00 Amol Ghotankar : > more specific - > http://struts.apache.org/release/2.3.x/docs/version-notes-2318.html > > > > On Tue, May 6, 2014 at 8:06 PM, Amol Ghotankar wrote: > >> Hi, >> >> Version notes t

Re: want to get help with an issue in upgrading struts to 2.3.16.2

2014-05-06 Thread Lukasz Lenart
notiger means Java 1.4 - Struts2 doesn't support that anymore (for long time) or rather there is no re-packaged version for Java 1.4 2014-05-06 4:11 GMT+02:00 liangyu105 : > yes, but at first i only use some necessary jar files , it always give this > error , and then i try to use all the lib f

Re: NPE in ActionSupport.getText() from servlet

2014-05-10 Thread Lukasz Lenart
2014-05-06 18:30 GMT+02:00 Bruno Klava : > Hi, > > in order to load a message from a *.properties file from a servlet, I used > to do: > > new ActionSupport().getText(messageKey); Do you use it inside Struts action? ActionContext is action specific which means you cannot access it from outside, fr

Re: [ANN] Struts 2.3.16.3 GA release available - security fix

2014-05-11 Thread Lukasz Lenart
3. Because in > S2-022 2.3.16.2 is not in affected version. > > Regards > Tamer > > -Original Message- > From: Lukasz Lenart [mailto:lukaszlen...@apache.org] > Sent: Monday, May 5, 2014 16:33 > To: Struts Users Mailing List; Struts Developers List; > announcem

Re: No parameters set in action when file upload exceeds max size

2014-05-12 Thread Lukasz Lenart
Does this issue [1] is related? [1] https://issues.apache.org/jira/browse/WW-4345 2014-05-12 21:07 GMT+02:00 Greg Lindholm : > Has any encountered this? > I've tried calling getParameter() on the request to see if I can manually > extract the parameters I need but this always returns null. It se

Re: No parameters set in action when file upload exceeds max size

2014-05-13 Thread Lukasz Lenart
https://issues.apache.org/jira/browse/WW-3025 ? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2014-05-09 17:43 GMT+02:00 Greg Lindholm : > When I try to upload a file that exceeds the configured 2M max then no > parameters get set on my action. > > I can't present the user with a

Re: Default parameter in custom result-type?

2014-05-14 Thread Lukasz Lenart
Define DEFAULT_PARAM like this https://git-wip-us.apache.org/repos/asf?p=struts.git;a=blob;f=core/src/main/java/org/apache/struts2/dispatcher/StrutsResultSupport.java;h=269ed872e742e52ceeebecdf111a7225583febc3;hb=HEAD#l111 Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2014-05-14

Re: ModelDriven and ParamsPrepareParams

2014-05-16 Thread Lukasz Lenart
Number 2 is also my favorite but it quite often depends ... on dev's preferences :D I remember that I wanted solve that case with ParametersInterceptors but there was a problem when and how to instantiate Model . 2014-05-08 9:27 GMT+02:00 Antonio Sánchez : > Hello. > > I have found problems using

Re: Struts zero-day vulnerability

2014-05-17 Thread Lukasz Lenart
nding. This is very helpful. > > Do you have information on what kind of attacks this vulnerability would > expose systems to? Ex. Cross-Site scripting. Is there anything else? > > Do you have any suggestions on how to test this fix? > > Thanks, > Deepak > >

Re: utf-8 characters and xslt result type

2014-05-22 Thread Lukasz Lenart
2014-05-23 7:54 GMT+02:00 Arturo Flores : > When I request /testutf8 I get the following in the browser: > XML Parsing Error: not well-formed > Location: http://localhost:8080/testutf8 > Line Number 1, Column 48: encoding="UTF-8"?>h�llo world > ---^ > > I

Re: Default action method for unmatched wildcard actions

2014-05-23 Thread Lukasz Lenart
Why don't use the Convention Plugin? 2014-05-23 10:58 GMT+02:00 Antonio Sánchez : > Hello. > > Given: > > method="{1}"> > name="input">/WEB-INF/jsp/editPerson.jsp > /WEB-INF/jsp/persons.jsp > > > And url: > > http://localhost:8080/

Re: utf-8 characters and xslt result type

2014-05-23 Thread Lukasz Lenart
2 http://www.lenart.org.pl/ 2014-05-23 17:36 GMT+02:00 Arturo Flores : > The value of Content-Type is text/xml. > > Arturo > > > On Thu, May 22, 2014 at 11:47 PM, Lukasz Lenart > wrote: > >> 2014-05-23 7:54 GMT+02:00 Arturo Flores : >> > When I request /testutf8 I get the fol

Re: Struts2 namespace confusion

2014-05-24 Thread Lukasz Lenart
Can you share your struts.xml file? Maybe you have defined default-action-ref or wildcard mapping? 2014-05-24 18:58 GMT+02:00 Matt Williams : > > > No, there are no other 'search' actions defined anywhere else. > > > > -- > On Sat, May 24, 2014 11:46 AM CDT Ken McWilli

Re: utf-8 characters and xslt result type

2014-05-24 Thread Lukasz Lenart
.SetCharacterEncodingFilter >> >> >> encoding >> UTF-8 >> >> >> ignore >> true >> >> >> >> >> CharacterEncodingFilter >> /* >> >> >> Shouldn't this be f

Re: Default action method for unmatched wildcard actions

2014-05-26 Thread Lukasz Lenart
don't see the way to do this using Conventions. I believe it is possible > using wildcards. Using conventions I am forced to override abstract methods > using Action annotations. But probably I am wrong so, please, let me know if > I can use Conventions bearing in mind this design ap

Re: Default action method for unmatched wildcard actions

2014-05-26 Thread Lukasz Lenart
2014-05-26 18:00 GMT+02:00 Antonio Sánchez : > That's not working for me. > > OK: /person -> com.myapp.actions.PersonAction#execute (SUCCESS) -> > person.jsp > > FAILS: /person-edit -> com.myapp.action.PersonAction#edit -> person-edit.jsp > (FAILS even annotating with @Action) Hm... right, I'm

Re: Default action method for unmatched wildcard actions

2014-05-26 Thread Lukasz Lenart
2014-05-27 8:21 GMT+02:00 Antonio Sánchez : > > > El mar 27 may 2014 08:04:48 CEST, Lukasz Lenart escribió: >> >> >> 2014-05-26 18:00 GMT+02:00 Antonio Sánchez : >>> >>> >>> That's not working for me. >>> >>> OK:

Re: Default action method for unmatched wildcard actions

2014-05-27 Thread Lukasz Lenart
2014-05-27 11:43 GMT+02:00 Antonio Sánchez : >>> I believe that is not a Conventions feature, but would be great to be. >> >> Yeah... just looking into code and looks doable, the problem is it >> will probably break backward compatibility :\ > > Struts3? S2.5 is closer ;-) Regards -- Łukasz + 4

Re: Default action method for unmatched wildcard actions

2014-05-27 Thread Lukasz Lenart
Yes, please! Thanks! 2014-05-27 11:48 GMT+02:00 Antonio Sánchez : > JIRA? > > El mar 27 may 2014 11:45:28 CEST, Lukasz Lenart escribió: >> >> 2014-05-27 11:43 GMT+02:00 Antonio Sánchez : >>>>> >>>>> I believe that is not a Conventions feature, bu

Re: Struts 2 Access messages with JSTL instead of s:text

2014-05-27 Thread Lukasz Lenart
2014-05-28 6:34 GMT+02:00 Alireza Fattahi : > Meanwhile, I tried to find a way to pass textprovider to jsp. But I could not > find a way > > public class BaseActionSupport extends ActionSupport{ > > //Same as ActionSupport > private TextProvider Provider; //with setter and getter

Re: Default action method for unmatched wildcard actions

2014-05-28 Thread Lukasz Lenart
Great! 2014-05-28 9:03 GMT+02:00 Antonio Sánchez : > https://issues.apache.org/jira/browse/WW-4353 > > El mar 27 may 2014 11:58:45 CEST, Lukasz Lenart escribió: > >> Yes, please! Thanks! >> >> 2014-05-27 11:48 GMT+02:00 Antonio Sánchez : >>> >>>

Re: Struts Dojo Plugin is broken (2.3.16.3)

2014-05-28 Thread Lukasz Lenart
https://issues.apache.org/jira/browse/WW-4349 :-) 2014-05-28 13:27 GMT+02:00 Andrew Paul : > Hi! > If anyone else have issues with latest Struts Dojo, here's something for > you; > > > The error in question can be seen when the javascript error console > yells: "TypeError: "$Rev$".match(...) is nu

<    4   5   6   7   8   9   10   11   12   13   >