Well, I tried with the 2.3.35 Core snapshot (dated September 6), and the 2.3.34 snapshot of the rest-plugin dated August 12.
I just did a build of only the bits needed to get the rest-showcase running (so mvn install, when that fails, mvn install -f plugins/rest-plugin/pom.xml, then app/rest-showcase), and that fails with the correct permission message. On Wed, Sep 6, 2017 at 6:38 AM Lukasz Lenart <lukaszlen...@apache.org> wrote: > 2017-09-06 12:31 GMT+02:00 William Stranathan <w...@thestranathans.com>: > > Odd - when I tested the snapshots, they were still vulnerable. I'm not > able > > to get it to build from source (now some odd javac access exception). > > Strange, do you have a date of the snapshot? Maybe Jenkins stopped > publishing them. > > > Where do I get the bits for testing 2.3.34, if not the snapshots? > > Here is the full info > http://markmail.org/message/5xuhb2vwc7iagjjr > > > Thanks & regards > -- > Ćukasz > + 48 606 323 122 <+48%20606%20323%20122> http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: user-unsubscr...@struts.apache.org > For additional commands, e-mail: user-h...@struts.apache.org > >