Re: struts.ognl.expressionMaxLength

2022-03-29 Thread Lukasz Lenart
wt., 29 mar 2022 o 14:31 Ralph Grove napisał(a): > Caused by: java.lang.SecurityException: This expression exceeded maximum > allowed length: participant.checklist >= 2 > && participant.surveyResponse > == null Could you show the source of your JSP

Re: struts.ognl.expressionMaxLength

2022-03-29 Thread Ralph Grove
[ERROR] 2022-03-29 08:26:35 [https-jsse-nio-8443-exec-54] OgnlValueStack - Could not evaluate this expression due to security constraints: [participant.checklist >= 2 && participant.surveyResponse == null] ognl.OgnlException: Parsing blocked due to

Re: struts.ognl.expressionMaxLength

2022-03-29 Thread Ralph Grove
I found the problem - I had neglected to include the leading spaces of the continuation line when calculating the expression length. They were converted to tabs in my editor, which made the expression shorter. Putting the expression on a single line eliminates the exception. Original source:

Re: struts.ognl.expressionMaxLength

2022-03-29 Thread Lukasz Lenart
pon., 28 mar 2022 o 20:33 Ralph Grove napisał(a): > > I’m experimenting with enhancing security by setting a value for > struts.ognl.expressionMaxLength. I checked all of the OGNL expressions in the > application, and the longest expression length is 65, so I set the max to 99: > > > > > At

Java 11-17

2022-03-29 Thread Daniel J Adams
Hi, Is it safe to use Java 11-17 with Struts2? Thank you, Daniel Adams Senior Software Developer TAG IT - SherColor The Sherwin-Williams Company Cell: 440-897-3601 daniel.j.ad...@sherwin.com

Re: Java 11-17

2022-03-29 Thread Lukasz Lenart
wt., 29 mar 2022 o 08:56 Daniel J Adams napisał(a): > > Hi, > > Is it safe to use Java 11-17 with Struts2? Struts 2.5.x should work on Java 11, but you need to wait on Struts 6.x to work smoothly on Java 17 https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration Regards --