Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-20 Thread Shivam Agrahari
other missing headers as well, but I’m not sure. > More information can be found in the documentation. > > > > Regards, > > > > Nate > > > > *From:* Shivam Agrahari > *Sent:* Wednesday, 16 April 2025 13:36 > *To:* Struts Users Mailing List > *S

Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-15 Thread Shivam Agrahari
Hi, I am currently developing a Java web application using the Struts 7.0.3 framework, JDK 23, and Tomcat 11.0.5, with a Dynamic Web Module version 6.1. Although the application is intended for an intranet environment, VA (Vulnerability Assessment) clearance is still required. To address security

Re: Request for Assistance with OWASP ZAP Vulnerabilities in Struts-Based Java Web Application

2025-04-16 Thread Shivam Agrahari
'self'; 'unsafe-inline' 'unsafe-eval' prefetch-src 'none'; manifest-src 'none'; object-src 'self'; media-src 'none'; "); String resultString = ai.invoke(); System.out.println("before result"); return resultSt

Re: Questions about migrating to Struts 7.0

2025-04-03 Thread Shivam Agrahari
Hi, I have enabled dev mode and also log level to debug but there is no error being displayed. Regards, Shivam On Wed, Apr 2, 2025 at 4:29 PM Lukasz Lenart wrote: > śr., 2 kwi 2025 o 12:29 Shivam Agrahari > napisał(a): > > I am in the process of upgrading a Java application from

Re: Questions about migrating to Struts 7.0

2025-04-02 Thread Shivam Agrahari
Hi, I am in the process of upgrading a Java application from Struts 6.7.4 to Struts 7.0.3. I've made the necessary changes as per the migration guide, such as updating javax to jakarta. However, when I submit the user ID and password, they are not being accessed in the action class. Additionally,