 Lukasz Lenart
|
21ef4e3487
|
Merge branch 'feature/exclude-object-class' into develop
This adds new security mechanism to prevent access particular classes and packages
|
2014-06-18 08:48:22 +02:00 |
|
|
Lukasz Lenart
|
9654287115
|
Adds additional classes to be excluded
|
2014-06-18 08:45:56 +02:00 |
|
|
Lukasz Lenart
|
bbcc6014f6
|
Excludes ActionContext from Ognl evaluation
|
2014-06-05 08:25:44 +02:00 |
|
|
Lukasz Lenart
|
eb8aae8752
|
Adds additional default exclude patterns to avoid access to #context
|
2014-06-05 08:25:24 +02:00 |
|
|
Lukasz Lenart
|
5ebc0643b5
|
Adds additional method to check if value of param isn't excluded
|
2014-06-01 10:49:20 +02:00 |
|
|
Lukasz Lenart
|
89cbe13853
|
Adds option to define additional accepted/excluded patterns
Also all patterns are by default case insensitive
|
2014-06-01 10:33:39 +02:00 |
|
|
Lukasz Lenart
|
2df72b9411
|
Adds javax.* to excluded packages
|
2014-05-23 17:36:45 +02:00 |
|
|
Lukasz Lenart
|
5a5af1b587
|
Uses WARN to report if package or class is excluded
|
2014-05-23 09:58:52 +02:00 |
|
|
Lukasz Lenart
|
4ee18f96bc
|
Ties excluding packages into Struts DI mechanism
|
2014-05-23 09:58:33 +02:00 |
|
|
Lukasz Lenart
|
dba9da3abf
|
Adds ability to exclude whole packages based on regex
|
2014-05-23 09:20:07 +02:00 |
|
|
Lukasz Lenart
|
8a93df10c4
|
Uses new service to check if param matches accepted patterns
|
2014-05-21 09:03:51 +02:00 |
|
|
Lukasz Lenart
|
b140faad28
|
Defines new service to check accepted patterns
|
2014-05-21 09:03:30 +02:00 |
|
|
Lukasz Lenart
|
97ef7b50bb
|
Cleans up after moving to package
|
2014-05-19 10:58:45 +02:00 |
|
|
Lukasz Lenart
|
ec98c8a95b
|
Cleans up after moving to package
|
2014-05-19 10:08:30 +02:00 |
|
|
Lukasz Lenart
|
7faf91abe1
|
Moves security related classes to security package
|
2014-05-19 09:59:23 +02:00 |
|
|
Lukasz Lenart
|
83b76b0fe8
|
Updates tests to match new requirements
|
2014-05-14 08:26:43 +02:00 |
|
|
Lukasz Lenart
|
d1d81f8a77
|
Adds new dependency to allow tests pass
|
2014-05-14 08:26:27 +02:00 |
|
|
Lukasz Lenart
|
5ec47b1e6d
|
Uses checker instead set of patterns to check if param is excluded
|
2014-05-14 08:25:50 +02:00 |
|
|
Lukasz Lenart
|
3d77c348b1
|
Adds additional methods needed by ParametersInterceptor
|
2014-05-14 08:25:22 +02:00 |
|
|
Lukasz Lenart
|
e8e5b51bc6
|
Cleans up new extension point
|
2014-05-14 08:25:00 +02:00 |
|
|
Lukasz Lenart
|
833a07e7fa
|
Extends logging with more information
|
2014-05-14 08:24:03 +02:00 |
|
|
Lukasz Lenart
|
bfbc4c04e0
|
Extracts interface to simplify implementation by users
|
2014-05-13 20:29:21 +02:00 |
|
|
Lukasz Lenart
|
ba1850a138
|
Adds description about new extension point
|
2014-05-13 20:28:26 +02:00 |
|
|
Lukasz Lenart
|
735fd96114
|
Uses newly defined Struts bean instead duplicating logic
|
2014-05-12 08:27:30 +02:00 |
|
|
Lukasz Lenart
|
9884c49fd0
|
Cleans up imports
|
2014-05-12 08:26:50 +02:00 |
|
|
Lukasz Lenart
|
4577e5eefb
|
Defines new extension point
|
2014-05-12 08:26:33 +02:00 |
|
|
Lukasz Lenart
|
65c023b6f3
|
Converts class with patterns into Struts bean
|
2014-05-12 08:26:12 +02:00 |
|
|
Lukasz Lenart
|
08b44fdad6
|
Merge branch 'develop' into feature/exclude-object-class
|
2014-05-08 22:07:22 +02:00 |
|
|
Lukasz Lenart
|
63897e83d9
|
Merge branch 'master' into develop
Conflicts:
apps/blank/pom.xml
apps/jboss-blank/pom.xml
apps/mailreader/pom.xml
apps/pom.xml
apps/portlet/pom.xml
apps/rest-showcase/pom.xml
apps/showcase/pom.xml
archetypes/pom.xml
archetypes/struts2-archetype-angularjs/pom.xml
archetypes/struts2-archetype-blank/pom.xml
archetypes/struts2-archetype-convention/pom.xml
archetypes/struts2-archetype-dbportlet/pom.xml
archetypes/struts2-archetype-plugin/pom.xml
archetypes/struts2-archetype-portlet/pom.xml
archetypes/struts2-archetype-starter/pom.xml
assembly/pom.xml
bundles/admin/pom.xml
bundles/demo/pom.xml
bundles/pom.xml
core/pom.xml
plugins/cdi/pom.xml
plugins/codebehind/pom.xml
plugins/config-browser/pom.xml
plugins/convention/pom.xml
plugins/dojo/pom.xml
plugins/dwr/pom.xml
plugins/embeddedjsp/pom.xml
plugins/gxp/pom.xml
plugins/jasperreports/pom.xml
plugins/javatemplates/pom.xml
plugins/jfreechart/pom.xml
plugins/jsf/pom.xml
plugins/json/pom.xml
plugins/junit/pom.xml
plugins/osgi/pom.xml
plugins/oval/pom.xml
plugins/pell-multipart/pom.xml
plugins/plexus/pom.xml
plugins/pom.xml
plugins/portlet-tiles/pom.xml
plugins/portlet/pom.xml
plugins/rest/pom.xml
plugins/sitegraph/pom.xml
plugins/sitemesh/pom.xml
plugins/spring/pom.xml
plugins/struts1/pom.xml
plugins/testng/pom.xml
plugins/tiles/pom.xml
plugins/tiles3/pom.xml
pom.xml
xwork-core/pom.xml
|
2014-05-08 22:06:00 +02:00 |
|
|
Lukasz Lenart
|
d2663cedd2
|
Sets correct version in poms to match actually released version
|
2014-05-08 21:57:25 +02:00 |
|
|
Lukasz Lenart
|
38a3f8bfb6
|
Merge branch 'hotfix/2.3.16.3'
Conflicts:
apps/rest-showcase/pom.xml
archetypes/struts2-archetype-angularjs/pom.xml
archetypes/struts2-archetype-blank/pom.xml
archetypes/struts2-archetype-convention/pom.xml
archetypes/struts2-archetype-dbportlet/pom.xml
archetypes/struts2-archetype-plugin/pom.xml
archetypes/struts2-archetype-portlet/pom.xml
archetypes/struts2-archetype-starter/pom.xml
assembly/src/main/assembly/docs.xml
|
2014-05-08 21:55:35 +02:00 |
|
|
Lukasz Lenart
|
7857b869a0
|
Removes override which isn't used anymore
|
2014-05-05 21:33:44 +02:00 |
|
|
Lukasz Lenart
|
62ee6b104a
|
Adds logging of excluded classes
|
2014-05-05 21:33:16 +02:00 |
|
|
Lukasz Lenart
|
a5946d0814
|
Merge branch 'develop' into feature/exclude-object-class
Conflicts:
xwork-core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
|
2014-05-05 06:43:31 +02:00 |
|
|
Lukasz Lenart
|
086c0a0d52
|
Adds default param to reduce noise in the logs during building
|
2014-05-05 06:41:07 +02:00 |
|
|
Lukasz Lenart
|
ba0ac0dfd4
|
Adds more use cases
|
2014-05-04 11:58:08 +02:00 |
|
|
Lukasz Lenart
|
b3ca9ea5e3
|
Adds special treatment of Object class and unit test
|
2014-05-04 11:18:00 +02:00 |
|
|
Lukasz Lenart
|
cb59074289
|
Removes hardcoded excluded params
|
2014-05-04 10:48:09 +02:00 |
|
|
Lukasz Lenart
|
f84efa5f42
|
Defines excluded classes
|
2014-05-03 20:18:44 +02:00 |
|
|
Lukasz Lenart
|
cdfb94d712
|
Updates test to use new excluded classes
|
2014-05-03 20:17:19 +02:00 |
|
|
Lukasz Lenart
|
afb5af1cc4
|
Uses excluded classes to
|
2014-05-03 20:17:05 +02:00 |
|
|
Lukasz Lenart
|
f0799fd99b
|
Adds mapping of excluded classes key
|
2014-05-03 20:16:58 +02:00 |
|
|
Lukasz Lenart
|
2180b06f7d
|
Sets excluded classes during injecting OgnlUtil
|
2014-05-03 20:16:33 +02:00 |
|
|
Lukasz Lenart
|
279805721d
|
Creates default context with excluded classes
|
2014-05-03 20:15:53 +02:00 |
|
|
Lukasz Lenart
|
d5bd607c6f
|
Renames excluded properties to excluded classes
|
2014-05-03 20:13:10 +02:00 |
|
|
Lukasz Lenart
|
c778297e80
|
Extends SecurityMemberAccess to included excluded classes
|
2014-05-03 20:12:14 +02:00 |
|
|
Lukasz Lenart
|
bcffc256fa
|
[maven-release-plugin] prepare for next development iteration
|
2014-05-02 17:10:54 +02:00 |
|
|
Lukasz Lenart
|
e03ff72861
|
[maven-release-plugin] prepare release STRUTS_2_3_16_3
STRUTS_2_3_16_3
|
2014-05-02 17:10:41 +02:00 |
|
|
Lukasz Lenart
|
0761909c65
|
Updates docs assembly with new location of exported pages
|
2014-05-02 15:47:34 +02:00 |
|
|
Lukasz Lenart
|
bca525da8d
|
Sets version in poms to -SNAPSHOT
|
2014-05-02 15:36:19 +02:00 |
|