Commit Graph

4137 Commits

Author SHA1 Message Date
Lukasz Lenart 930fef7679 Merge pull request #1180 from henrikplate/fix-CVE-2024-53677
Fix CVE-2024-53677 in 2-3-x
2025-01-07 17:54:42 +01:00
henrikplate d2d01dfe93 Extend check before adding file upload params 2025-01-07 10:10:31 +01:00
Lukasz Lenart 056228cd1e Merge pull request #819 from henrikplate/fix-CVE-2023-50164
Fix CVE-2023-50164 in 2-3-x
2023-12-22 08:56:38 +01:00
henrikplate 39de8827cb Add file upload params case-insensitive 2023-12-20 13:49:59 +01:00
Yasser Zamani 60a1a2642a [maven-release-plugin] prepare release STRUTS_2_3_37 STRUTS_2_3_37 2018-12-30 14:50:11 +03:30
Yasser Zamani d25a342bd2 Merge pull request #305 from lukaszlenart/WW-4975-struts23x
[WW-4975] Upgrades commons-fileupload to version 1.4 - Struts 2.3.x
2018-12-30 10:15:48 +03:30
Lukasz Lenart 6870fb7f79 WW-4975 Upgrades commons-fileupload to version 1.4 2018-12-29 17:23:44 +01:00
Lukasz Lenart e62ae2ee7a Upgrades commons-fileupload to version 1.3.3 2018-11-06 10:56:41 +01:00
Yasser Zamani 83dc967eac [maven-release-plugin] prepare for next development iteration 2018-09-18 12:25:22 +04:30
Yasser Zamani dd1588d3eb [maven-release-plugin] prepare release STRUTS_2_3_36 STRUTS_2_3_36 2018-09-18 12:14:32 +04:30
Yasser Zamani 6194d3fc88 change http to https in doc urls 2018-09-18 11:41:22 +04:30
Yasser Zamani bd0d514de9 add checksum-maven-plugin
http://www.apache.org/dev/release-distribution#sigs-and-sums
> New policy :
>
>   -- SHOULD supply a SHA-256 and/or SHA-512 checksum file
>   -- SHOULD NOT supply MD5 or SHA-1 checksum files

See also: WW-4951
2018-09-17 17:32:32 +04:30
Lukasz Lenart cde8a288f9 Merge pull request #248 from aleksandr-m/feature/2_3_security_logs
Improve log messages in SecurityMemberAccess
2018-09-04 06:47:17 +02:00
Aleksandr Mashchenko ac868ae3ab Improve log messages in SecurityMemberAccess 2018-09-03 22:07:17 +03:00
Yasser Zamani feb5ab1333 Merge pull request #245 from apache/WW-4954-struts-2-3
WW-4954 Moves XWorkList out of the util package
2018-08-31 16:19:42 +04:30
Lukasz Lenart 458acb89e5 WW-4954 Moves XWorkList out of the util package 2018-08-30 08:52:33 +02:00
Lukasz Lenart 88c2d216e3 Merge pull request #243 from benelog/fix-log-2-3-x
Fix logging messages (for 2.3.x)
2018-08-27 16:10:10 +02:00
Sanghyuk Jung 61735542c2 Fix logging messages 2018-08-27 21:02:41 +09:00
Lukasz Lenart 0b41b68da4 [maven-release-plugin] prepare for next development iteration 2018-07-12 09:51:27 +02:00
Lukasz Lenart dbcca3512e [maven-release-plugin] prepare release STRUTS_2_3_35 STRUTS_2_3_35 2018-07-12 09:51:04 +02:00
Lukasz Lenart 6ec2bdc197 Uses proper path to Gitbox 2018-07-12 09:40:21 +02:00
Lukasz Lenart 9b9aa10059 [maven-release-plugin] rollback the release of STRUTS_2_3_35 2018-07-12 09:37:38 +02:00
Lukasz Lenart 6c216de38e [maven-release-plugin] prepare release STRUTS_2_3_35 2018-07-12 09:37:10 +02:00
Lukasz Lenart a89b7c11af Uses the new docs site to build assembly 2018-07-12 09:29:25 +02:00
Yasser Zamani 918182344c fix some sonar issue 2018-06-29 23:25:59 +04:30
Yasser Zamani 52e8d46364 revert a delete mistake from previous commit 2018-06-21 14:11:20 +04:30
Yasser Zamani c59f294fb9 delete redundant code for performance 2018-06-21 13:20:48 +04:30
Lukasz Lenart 86e5bd7f52 Upgrades freemarker 2018-06-21 08:19:44 +02:00
Lukasz Lenart bea6fb599d Ports changes to properly support primitives 2018-06-21 08:19:33 +02:00
Lukasz Lenart 4a3917176d Avoids parsing namespace when using existing namespace 2018-05-08 07:58:34 +02:00
Yasser Zamani a746fc872a revert 4db5cdc 2018-04-26 22:36:30 +04:30
Yasser Zamani 949e069f53 make maven's surefire show stacktrace in console 2018-04-26 21:22:33 +04:30
Yasser Zamani 4db5cdc473 not fail if OS or JDK doesn't support jpeg 2018-04-26 20:44:50 +04:30
Yasser Zamani afc8f20440 fork apt to avoid duplicate same class loading which fails JDK6 2018-04-24 18:27:01 +04:30
Lukasz Lenart 75d7bf481c Uses Java 6 in the pom 2017-11-29 11:22:48 +01:00
Lukasz Lenart d86539ed07 [maven-release-plugin] prepare for next development iteration 2017-09-05 20:37:36 +02:00
Lukasz Lenart f0b3a1d213 [maven-release-plugin] prepare release STRUTS_2_3_34 STRUTS_2_3_34 2017-09-05 20:37:14 +02:00
Lukasz Lenart 2306f5f7fa Uses better class resolver logic 2017-08-26 14:26:20 +02:00
Lukasz Lenart ed7f9dd4cb Drops unused annotation in this Java version 2017-08-24 12:07:33 +02:00
Lukasz Lenart cf53b59647 Fixes post cherry-pick 2017-08-24 11:09:29 +02:00
Lukasz Lenart 6dd6e5cfb7 Allows define allowed classes per action 2017-08-24 09:10:28 +02:00
Lukasz Lenart b9a0c497d3 Fixes post cherry-pick 2017-08-24 09:10:12 +02:00
Lukasz Lenart 2f95b9a130 Updates tests 2017-08-24 08:56:07 +02:00
Lukasz Lenart 103e3b174e Updates flow to handle new API 2017-08-24 08:55:50 +02:00
Lukasz Lenart 2776b34b44 Adds an abstract layer to allow easily handle API change 2017-08-24 08:53:57 +02:00
Lukasz Lenart 287e3bc8cb Adds new methods and marks current as deprecated 2017-08-24 08:49:21 +02:00
Lukasz Lenart 677ccebe83 WW-4836 Upgrades xstream lib to the latest version 2017-08-24 08:46:34 +02:00
Lukasz Lenart f11ac901d3 WW-4844 Upgrades to struts-master 11 2017-08-23 07:22:23 +02:00
Stefaan Dutry 3fddfb6eb5 WW-4834 Improve RegEx used to validate URLs 2017-08-04 13:58:31 +02:00
Lukasz Lenart 744c1f409d Uses better RegEx to improve performance 2017-08-01 12:01:43 +02:00