Maybe it's related to that
http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html
I've added some more restrictive rules regarding request's parameters
names. Lot of special characters are disallowed, take a look on line
138
I have just started using Struts 2.2.1, and I have found a bug ... I
have several Hash Maps with a String for the key value. These key
values sometimes contain special characters, including '-, /, \, _' any
Map with a key value containing one of these characters seems to
silently fail to call the
Under what circumstances?
On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks michelle.we...@jetisre.com
wrote:
I have just started using Struts 2.2.1, and I have found a bug ... I
have several Hash Maps with a String for the key value. These key
values sometimes contain special characters,
: Wednesday, September 22, 2010 10:21 AM
To: Struts Users Mailing List
Subject: Re: Struts 2.2.1 Problem
Under what circumstances?
On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks
michelle.we...@jetisre.com
wrote:
I have just started using Struts 2.2.1, and I have found a bug ... I
have several Hash
On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks michelle.we...@jetisre.com
wrote:
I guess I'm not sure what exactly you are asking ...
When the error happens: the original message just said you had a map that
set wasn't called on when you had key values containing certain
characters--on its
On 9/22/10 11:56 AM, Michelle Weeks wrote:
If one key has a special character the whole Map is not set into the action.
I'm guessing it's an encoding issue. Are these strings encoded in the
resulting html? If the parameters are part of the URL (GET request)
then they'll probably wind up
properties in the resources directory.
-Original Message-
From: Dave Newton [mailto:davelnew...@gmail.com]
Sent: Wednesday, September 22, 2010 11:10 AM
To: Struts Users Mailing List
Subject: Re: Struts 2.2.1 Problem
On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks
michelle.we...@jetisre.com
On 9/22/10 1:58 PM, Michelle Weeks wrote:
input type=text name=pagesMap['name/name'].key value=keyValue /
And is that form submitted with GET or POST?
Are any characters encoded in that submission?
Are you certain that the pagesMap map isn't having .put(name%2fname,
keyValue) called on it?
8 matches
Mail list logo