Re: Struts 2.2.1 Problem

2010-09-23 Thread Lukasz Lenart
Maybe it's related to that http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html I've added some more restrictive rules regarding request's parameters names. Lot of special characters are disallowed, take a look on line 138

Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
I have just started using Struts 2.2.1, and I have found a bug ... I have several Hash Maps with a String for the key value. These key values sometimes contain special characters, including '-, /, \, _' any Map with a key value containing one of these characters seems to silently fail to call the

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dave Newton
Under what circumstances? On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks michelle.we...@jetisre.com wrote: I have just started using Struts 2.2.1, and I have found a bug ... I have several Hash Maps with a String for the key value. These key values sometimes contain special characters,

RE: Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
: Wednesday, September 22, 2010 10:21 AM To: Struts Users Mailing List Subject: Re: Struts 2.2.1 Problem Under what circumstances? On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks michelle.we...@jetisre.com wrote: I have just started using Struts 2.2.1, and I have found a bug ... I have several Hash

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dave Newton
On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks michelle.we...@jetisre.com wrote: I guess I'm not sure what exactly you are asking ... When the error happens: the original message just said you had a map that set wasn't called on when you had key values containing certain characters--on its

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dale Newfield
On 9/22/10 11:56 AM, Michelle Weeks wrote: If one key has a special character the whole Map is not set into the action. I'm guessing it's an encoding issue. Are these strings encoded in the resulting html? If the parameters are part of the URL (GET request) then they'll probably wind up

RE: Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
properties in the resources directory. -Original Message- From: Dave Newton [mailto:davelnew...@gmail.com] Sent: Wednesday, September 22, 2010 11:10 AM To: Struts Users Mailing List Subject: Re: Struts 2.2.1 Problem On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks michelle.we...@jetisre.com

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dale Newfield
On 9/22/10 1:58 PM, Michelle Weeks wrote: input type=text name=pagesMap['name/name'].key value=keyValue / And is that form submitted with GET or POST? Are any characters encoded in that submission? Are you certain that the pagesMap map isn't having .put(name%2fname, keyValue) called on it?