It's actually suppose to be public, as it is now in the nightly build.
Apparently, I didn't get that change committed back to the 1.0.1 branch,
only the 1.1 branch. 

-- Ted Husted, Husted dot Com, Fairport NY USA.
-- Building Java web applications with Struts.
-- Tel +1 585 737-3463.
-- Web http://www.husted.com/struts/


Roland Huss wrote:
> 
> Ahoi,
> 
> I was away from Struts for some time (real life bite me ;-), so I
> probably missed quite a bit from the latest show. Sorry for that.
> 
> As I updated to the current 1.0.1 branch, my file upload stuff broke
> due to a change in ActionFrom that moved getMultipartRequestHandler()
> from public to protected.
> 
> The cvs log states:
> 
> ----------------------------
> revision 1.7.2.2
> date: 2001/11/21 13:29:31;  author: husted;  state: Exp;  lines: +29 -18
> Add ActionServletWrapper and modify ActionForm to address issue #4997 - 
>autopopulation exploit.
> This change prevents the Public String properties of ActionServlet from being 
>changed via a query string.
> ----------------------------
> 
> So, my question: What's the canonical way now to obtain the
> MultipartRequestHandler (without extending ActionForm) ?
> 
> cu....
> --
>                                                         ...roland huss
>                                                              consol.de
> 
> --
> To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to