115fef2af7
[maven-release-plugin] prepare for next development iteration
2022-02-24 07:11:22 +01:00
0c9f9c3400
[maven-release-plugin] prepare release STRUTS_6_0_0_RC3
2022-02-24 07:11:13 +01:00
fe7959e5d8
WW-5168 Adjusts tests to flipped if condition
2022-02-13 10:19:01 +01:00
d454384a4b
WW-5168 Reverts condition in if statement
2022-02-13 10:00:20 +01:00
1c3cab2e6f
WW-5168 Fixes disabled attribute across all the Javatemplate tags
2022-02-10 18:42:10 +01:00
b1e9eae01c
WW-5168 Support submit unchecked in Javatemplates and fixes logic for all FTL template
2022-02-09 17:33:46 +01:00
14c3a14c8f
[maven-release-plugin] prepare for next development iteration
2022-01-29 17:36:34 +01:00
f997d9b1ed
[maven-release-plugin] prepare release STRUTS_6_0_0_RC2
2022-01-29 17:36:26 +01:00
effe6875b7
WW-5022 Pass escapeHtmlBody flag to JavaTemplates tags
2022-01-07 10:07:13 +01:00
57f76d94f2
[maven-release-plugin] prepare for next development iteration
2021-12-19 12:50:38 +01:00
96aedf9bd5
[maven-release-plugin] prepare release STRUTS_6_0_0_RC1
2021-12-19 12:50:28 +01:00
b2bfdc5c88
fix double evaluations... ( #483 )
...
* fix double evaluations...
* fix UIBean and its subclasses double evaluations
* fix Param tag used with Bean tag double evaluations
(to be continued)
Reference:
https://securitylab.github.com/research/apache-struts-double-evaluation/
* fix AliasInterceptor
* fix StreamResult
* fix JasperReportsResult
* add singleton not excluded and accepted pattern checker for non interceptors
* add missing escapedIds
2021-11-24 22:39:01 +03:30
57db5c337c
Merge pull request #462 from apache/WW-5021-static-content-path
...
[WW-5021] Introduces a new constant to allow define a path to static content
2021-01-11 07:33:06 +01:00
1775e0e6cf
WW-5000 Extracts string literals as constants
2021-01-03 10:56:46 +01:00
ef72783f50
WW-5021 Introduces a new constant to allow define a path to static content
2021-01-02 17:52:29 +01:00
eec9eb3c0c
WW-3877 Drops altSyntax option
2020-12-06 09:59:01 +01:00
8bbe1949e1
Avoids recursion in tags
2020-11-13 19:31:41 +01:00
62424ef30c
Refactoring script and link elements for CSP nonce propagation
2020-08-31 11:39:57 +03:00
4d8bec5d0a
Cspinterceptor ( #2 )
...
Support for CSP in Struts 2:
- Implements a CSP Interceptor that adds a nonce-based, strict-dynamic policy to HTTP responses.
- Implements custom JSP and FTL <script> tags that add nonces to script blocks automatically. This makes these tags compatible with CSP with minimal refactoring.
- Implements an extensible action that can be used to collect CSP reports out of the box. This behaviour is extensible, so developers can customise the processing of CSP reports.
Co-authored-by: Ecenaz Jen Ozmen <eo2419@columbia.edu >
Co-authored-by: Giannis Chatziveroglou <giannisc@google.com >
Co-authored-by: Sal <salchoman@gmail.com >
2020-07-28 15:52:50 +02:00
c253b7f480
WW-4789 WW-3788 Marks CONTAINER as deprecated on behalf using helper methods
2020-04-10 19:39:10 +02:00
dfda16d743
WW-4789 WW-3788 Introduces helper methods to allow build fluent API
2020-04-05 17:48:59 +02:00
1bfa1ce6d1
WW-4789 WW-3788 Adds instance bind() to simplify bind operation
2020-04-05 07:46:56 +02:00
1a8c751b9a
WW-4789 WW-3788 Uses bind() instead of bound()
2020-04-05 07:46:56 +02:00
f4aa4ee09a
WW-4789 WW-3788 ActionContext refactoring
2020-04-05 07:46:56 +02:00
478945a0bd
WW-4915 Replace deprecated commons-lang3 classes (add commons-text dependency, replace StringEscapeUtils)
2018-02-05 21:15:17 +02:00
80698ed516
Merge pull request #186 from sdutry/sonar-entrySet
...
changed Map iterations to use entrySet when both key and value are used
2017-12-01 20:46:00 +01:00
9b9bd212ed
[maven-release-plugin] prepare for next development iteration
2017-11-29 08:35:58 +01:00
0856157e27
[maven-release-plugin] prepare release STRUTS_2_5_14_1
2017-11-29 08:35:37 +01:00
d36ec579fc
[maven-release-plugin] prepare for next development iteration
2017-11-14 07:43:35 +01:00
04db841358
[maven-release-plugin] prepare release STRUTS_2_5_14
2017-11-14 07:43:14 +01:00
0bde78cc36
changed Map iterations to use entrySet when both key and value are used
2017-11-13 21:13:27 +01:00
8b95838c58
Adds proper XML header
2017-10-22 12:29:13 +02:00
38a1434114
Adds missing header with license and fixes tests
2017-10-21 19:24:45 +02:00
e7c65fb0b4
Adds missing header with license
2017-10-21 17:47:51 +02:00
73359c480b
Adds missing header with license
2017-10-21 11:24:48 +02:00
cb389d292d
Fixes Maven site generation
2017-10-20 09:05:29 +02:00
c9bdb24bf9
[maven-release-plugin] prepare for next development iteration
2017-08-23 13:05:27 +02:00
9f5082615e
[maven-release-plugin] prepare release STRUTS_2_5_13
2017-08-23 13:05:07 +02:00
cf7bfe63e2
[maven-release-plugin] prepare for next development iteration
2017-07-06 09:40:39 +02:00
ee74aea445
[maven-release-plugin] prepare release STRUTS_2_5_12
2017-07-06 09:40:05 +02:00
f84255783c
[maven-release-plugin] prepare for next development iteration
2017-06-22 13:11:35 +02:00
a249ed5f31
[maven-release-plugin] prepare release STRUTS_2_5_11
2017-06-22 13:11:07 +02:00
46153e78da
WW-4801 Only one hidden field per checkboxlist.
2017-05-30 15:02:23 +01:00
465a15664f
[maven-release-plugin] prepare for next development iteration
2017-01-27 10:35:30 +01:00
f0f4e9ece7
[maven-release-plugin] prepare release STRUTS_2_5_10
2017-01-27 10:35:05 +01:00
0023d9664b
[maven-release-plugin] prepare for next development iteration
2017-01-17 10:27:23 +01:00
ee27b6604a
[maven-release-plugin] prepare release STRUTS_2_5_9
2017-01-17 10:27:01 +01:00
4727265e59
[maven-release-plugin] prepare for next development iteration
2016-12-06 11:18:07 +01:00
4281e31864
[maven-release-plugin] prepare release STRUTS_2_5_8
2016-12-06 11:17:46 +01:00
484ce1d191
[maven-release-plugin] prepare for next development iteration
2016-12-02 08:27:02 +01:00
Lukasz Lenart