Commit Graph

73 Commits

Author SHA1 Message Date
Lukasz Lenart fe7959e5d8 WW-5168 Adjusts tests to flipped if condition 2022-02-13 10:19:01 +01:00
Lukasz Lenart d454384a4b WW-5168 Reverts condition in if statement 2022-02-13 10:00:20 +01:00
Lukasz Lenart 1c3cab2e6f WW-5168 Fixes disabled attribute across all the Javatemplate tags 2022-02-10 18:42:10 +01:00
Lukasz Lenart b1e9eae01c WW-5168 Support submit unchecked in Javatemplates and fixes logic for all FTL template 2022-02-09 17:33:46 +01:00
Lukasz Lenart effe6875b7 WW-5022 Pass escapeHtmlBody flag to JavaTemplates tags 2022-01-07 10:07:13 +01:00
Yasser Zamani b2bfdc5c88 fix double evaluations... (#483)
* fix double evaluations...

* fix UIBean and its subclasses double evaluations
* fix Param tag used with Bean tag double evaluations
(to be continued)

Reference:
https://securitylab.github.com/research/apache-struts-double-evaluation/

* fix AliasInterceptor

* fix StreamResult

* fix JasperReportsResult

* add singleton not excluded and accepted pattern checker for non interceptors

* add missing escapedIds
2021-11-24 22:39:01 +03:30
Lukasz Lenart 57db5c337c Merge pull request #462 from apache/WW-5021-static-content-path
[WW-5021] Introduces a new constant to allow define a path to static content
2021-01-11 07:33:06 +01:00
Lukasz Lenart 1775e0e6cf WW-5000 Extracts string literals as constants 2021-01-03 10:56:46 +01:00
Lukasz Lenart ef72783f50 WW-5021 Introduces a new constant to allow define a path to static content 2021-01-02 17:52:29 +01:00
Lukasz Lenart eec9eb3c0c WW-3877 Drops altSyntax option 2020-12-06 09:59:01 +01:00
Lukasz Lenart 8bbe1949e1 Avoids recursion in tags 2020-11-13 19:31:41 +01:00
Ecenaz Ozmen 62424ef30c Refactoring script and link elements for CSP nonce propagation 2020-08-31 11:39:57 +03:00
gchatz22 4d8bec5d0a Cspinterceptor (#2)
Support for CSP in Struts 2:

- Implements a CSP Interceptor that adds a nonce-based, strict-dynamic policy to HTTP responses.
- Implements custom JSP and FTL <script> tags that add nonces to script blocks automatically. This makes these tags compatible with CSP with minimal refactoring.
- Implements an extensible action that can be used to collect CSP reports out of the box. This behaviour is extensible, so developers can customise the processing of CSP reports. 

Co-authored-by: Ecenaz Jen Ozmen <eo2419@columbia.edu>
Co-authored-by: Giannis Chatziveroglou <giannisc@google.com>
Co-authored-by: Sal <salchoman@gmail.com>
2020-07-28 15:52:50 +02:00
Lukasz Lenart c253b7f480 WW-4789 WW-3788 Marks CONTAINER as deprecated on behalf using helper methods 2020-04-10 19:39:10 +02:00
Lukasz Lenart dfda16d743 WW-4789 WW-3788 Introduces helper methods to allow build fluent API 2020-04-05 17:48:59 +02:00
Lukasz Lenart 1bfa1ce6d1 WW-4789 WW-3788 Adds instance bind() to simplify bind operation 2020-04-05 07:46:56 +02:00
Lukasz Lenart 1a8c751b9a WW-4789 WW-3788 Uses bind() instead of bound() 2020-04-05 07:46:56 +02:00
Lukasz Lenart f4aa4ee09a WW-4789 WW-3788 ActionContext refactoring 2020-04-05 07:46:56 +02:00
Aleksandr Mashchenko 478945a0bd WW-4915 Replace deprecated commons-lang3 classes (add commons-text dependency, replace StringEscapeUtils) 2018-02-05 21:15:17 +02:00
Stefaan Dutry 0bde78cc36 changed Map iterations to use entrySet when both key and value are used 2017-11-13 21:13:27 +01:00
Lukasz Lenart 8b95838c58 Adds proper XML header 2017-10-22 12:29:13 +02:00
Lukasz Lenart 38a1434114 Adds missing header with license and fixes tests 2017-10-21 19:24:45 +02:00
Lukasz Lenart e7c65fb0b4 Adds missing header with license 2017-10-21 17:47:51 +02:00
Lukasz Lenart 73359c480b Adds missing header with license 2017-10-21 11:24:48 +02:00
Lukasz Lenart cb389d292d Fixes Maven site generation 2017-10-20 09:05:29 +02:00
gregh 46153e78da WW-4801 Only one hidden field per checkboxlist. 2017-05-30 15:02:23 +01:00
Lukasz Lenart e60119436a WW-4632 Uses proper DTD version 2016-06-12 13:10:49 +02:00
Aleksandr Mashchenko c95c347d4e WW-4614 - Remove div and table tags (div) 2016-03-25 21:23:18 +02:00
Lukasz Lenart 754c8a247a WW-4593 Upgrades easy-mock 2016-03-04 07:09:53 +01:00
gregh3269 d397abcfc1 html5 attributes again 2016-02-10 11:12:10 +00:00
gregh3269 40f7b39c3f Allow html5 attributes 2016-02-10 08:53:32 +00:00
Victor Sosa 20e13f1625 WW-4593 Easymock upgrade to 3.4 2016-01-20 16:28:36 -04:00
Johannes Geppert 8e8771153a WW-4504 - Mark current logging layer as @deprecated and use Log4j2 as default one
- Use log4j2 placeholder for logging messages and optimize logging a bit
2015-05-25 21:25:50 +02:00
Johannes Geppert 95805e54f7 WW-4504 - Mark current logging layer as @deprecated and use Log4j2 as default one
- Use log4j2 Logger and LogManager instead of xwork implementation everywhere
2015-05-25 12:42:23 +02:00
Lukasz Lenart 4ad023207f WW-4473 Adds support for title attribute in SubmitHandler 2015-03-06 21:07:17 +01:00
Lukasz Lenart 5f2898eadf Cleans up Maven generated website 2014-12-02 12:41:06 +01:00
Lukasz Lenart 3414c1b67d WW-4320 Chains exception to simplify debugging 2014-04-10 07:23:24 +02:00
Lukasz Lenart 9c9d2b5a58 WW-3493 Adds new datetextfield tag 2014-03-27 19:42:35 +01:00
Lukasz Lenart fc6c34d85c Adds 'name' to be rendered for submit input type 'image' 2014-03-06 22:52:05 +01:00
Greg Huber 18b9c55b4b Code formatting changes only. 2014-02-03 14:02:39 +00:00
Greg Huber e858e4d000 Make we sure we handle doubles/longs correctly, for class cast
exception.
2014-02-03 10:09:22 +00:00
Greg Huber f3c54b90ac Copy changes from checkboxlist and refactor changes to match existing
code.  See WW-4181.
2014-01-31 13:45:03 +00:00
Christian Grobmeier 5e3e793576 removed unused site folder and site.xml
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1521449 13f79535-47bb-0310-9956-ffa450edef68
2013-09-10 12:08:04 +00:00
Bruce Allen Phillips f046343833 WW-4168 Added if statement in method isChecked to verify that the String Array of checkBox name values is not null.
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1512348 13f79535-47bb-0310-9956-ffa450edef68
2013-08-09 15:41:10 +00:00
Lukasz Lenart 26778533ef WW-4084 Restores appending <s:param>s to <s:a/> tag which was broken since WW-3920
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1487806 13f79535-47bb-0310-9956-ffa450edef68
2013-05-30 10:22:34 +00:00
Lukasz Lenart eb2a9eb8ff WW-3593 Adds missing html files
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1486344 13f79535-47bb-0310-9956-ffa450edef68
2013-05-25 16:37:42 +00:00
Lukasz Lenart 95238ac73e WW-4036 Extends support of Dynamic Attributes to evaluate null attributes to empty string
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1486079 13f79535-47bb-0310-9956-ffa450edef68
2013-05-24 14:39:40 +00:00
Lukasz Lenart 7df4af2deb WW-3676 Uses simple toString() for non-null objects to support other types than String and Integer
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1484461 13f79535-47bb-0310-9956-ffa450edef68
2013-05-20 12:59:25 +00:00
Lukasz Lenart 34af1cd8a2 WW-3998 Extracts interface and adds default implementation base on existing code
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1456961 13f79535-47bb-0310-9956-ffa450edef68
2013-03-15 14:02:12 +00:00
Lukasz Lenart bacefffda4 WW-3919 adds proper logic to render id attribute
git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1436660 13f79535-47bb-0310-9956-ffa450edef68
2013-01-21 22:23:18 +00:00