Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-11 01:27:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,962 Commits 21 Branches 184 Tags
2202e5fbbba9bd9e07f07a4ccdde381c9b962e8c
Commit Graph

6962 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
jdyer1 2202e5fbbb WW-5141 
- initial attempt to update references javax>jakarta and get things to compile
 2023-12-16 10:39:28 +01:00
Lukasz Lenart f4501846c6 Merge pull request #808 from apache/feature/WW-5371-modern-upload 
[WW-5371] Modern upload
 2023-12-15 10:06:35 +01:00
Lukasz Lenart 64c13cc746 WW-5370 Simplifies error handling logic 2023-12-15 09:38:43 +01:00
Lukasz Lenart f684effd9a Merge pull request #807 from apache/feature/http-params-case 
[WW-5370] Makes HttpParameters case-insensitive
 2023-12-12 10:26:17 +01:00
Lukasz Lenart 102e040e09 WW-5370 Adds proper logic to handle null 2023-12-12 10:00:31 +01:00
Lukasz Lenart 4eaab8a79d WW-5370 Simplifies code 2023-12-12 09:48:45 +01:00
Lukasz Lenart c40978f8cd WW-5370 Uses TreeMap with case-insensitive comparator 2023-12-12 08:52:57 +01:00
Lukasz Lenart 3ef9ade890 WW-5371 Document how to use the new file upload logic 2023-12-12 08:35:31 +01:00
Lukasz Lenart 3ce3f82646 WW-5371 Simplifies file upload logic and extracts constants 2023-12-11 08:55:20 +01:00
Lukasz Lenart dc4103bcb5 WW-5371 Uses the new upload mechanism in Showcase app 2023-12-11 07:56:38 +01:00
Lukasz Lenart 0bc0217b9d WW-5371 Implements action based file upload 2023-12-11 07:37:38 +01:00
Lukasz Lenart 13d972d6ee WW-5370 Makes HttpParameters case-insensitive 2023-12-10 13:14:55 +01:00
Kusal Kithul-Godage 6fcb50122d Merge pull request #806 from apache/WW-5339-astmap-block 
WW-5339 Add option to block custom OGNL maps
 2023-12-05 17:36:14 +11:00
Kusal Kithul-Godage 80e83616b1 Merge pull request #800 from apache/WW-5364-populate-allowlist 
WW-5364 Automatically populate OGNL allowlist
 2023-12-05 16:57:17 +11:00
Kusal Kithul-Godage 002e598b75 WW-5339 Add option to block custom OGNL maps 2023-12-05 13:18:48 +11:00
Kusal Kithul-Godage 48a82feada WW-5339 Make ClassResolver a bean 2023-12-05 13:05:03 +11:00
Kusal Kithul-Godage a7d273c1f0 WW-5343 Make StrutsTestCase extend same package 2023-12-04 22:40:39 +11:00
Kusal Kithul-Godage 589219baac WW-5343 Add missing licenses 2023-12-04 21:58:07 +11:00
Kusal Kithul-Godage a26823386c WW-5343 Add integration tests for ConfigurationProvider populating ProviderAllowlist 2023-12-04 21:48:22 +11:00
dependabot[bot] cf4523fba5 Bump actions/setup-java from 3 to 4 (#804) 
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-04 06:36:59 +01:00
Kusal Kithul-Godage 16f822a2b2 WW-5343 Move JUnit4 test case into Struts-core 2023-12-03 23:36:10 +11:00
Kusal Kithul-Godage 5e33c7f2c4 WW-5343 Add unit test coverage for ProviderAllowlist 2023-12-03 23:22:06 +11:00
Kusal Kithul-Godage 9aff37a83b Merge branch 'master' into WW-5364-populate-allowlist 2023-11-26 23:46:44 +11:00
Kusal Kithul-Godage d030532d61 WW-5343 Collect bootstrap factories 2023-11-26 23:46:31 +11:00
Kusal Kithul-Godage a60842af79 Merge pull request #791 from apache/WW-5343-sec-extend 
WW-5343 Make SecurityMemberAccess an extensible bean
 2023-11-26 19:36:56 +11:00
Kusal Kithul-Godage 0566a207f4 Merge branch 'WW-5343-sec-extend' into WW-5364-populate-allowlist 
# Conflicts:
#	core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
 2023-11-26 18:24:44 +11:00
Kusal Kithul-Godage 7929d8634c WW-5343 Address SonarCloud code smells 2023-11-26 17:02:34 +11:00
Kusal Kithul-Godage 85d2c742cd WW-5343 Clean up bootstrap constants 2023-11-26 16:52:07 +11:00
Kusal Kithul-Godage d7df9ce998 WW-5364 Replace some allowlist classes with packages 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage 6657e01f9b WW-5364 Don't throw ConfigurationException on unloadable action or interceptor classes 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage 39c3e332d7 WW-5364 Add Struts components to allowlist 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage ee442db9ed WW-5364 Enable allowlist for showcase 2023-11-24 21:32:33 +11:00
Kusal Kithul-Godage 3bf3e5f8db WW-5364 Inject ProviderAllowlist into SecurityMemberAccess 2023-11-24 21:32:33 +11:00
Kusal Kithul-Godage 198812fe8b WW-5364 Implement provider allowlist 2023-11-24 21:32:33 +11:00
Kusal Kithul-Godage 1d76bff95e WW-5364 Make allowlist classloader specific 2023-11-24 21:07:23 +11:00
Kusal Kithul-Godage ebdf019959 WW-5364 Modify XmlDocConfigurationProvider to be able to load into allowlist 2023-11-24 21:07:23 +11:00
Kusal Kithul-Godage d1bdc83f17 Merge pull request #796 from apache/dependabot/maven/jackson.version-2.16.0 
Bump jackson.version from 2.15.3 to 2.16.0
 2023-11-23 21:15:11 +11:00
Kusal Kithul-Godage eba79a7844 WW-5343 Fix final test 2023-11-23 01:09:49 +11:00
Kusal Kithul-Godage 9640f5bde0 WW-5343 Migrate tests to SecurityMemberAccessTest 2023-11-23 01:00:14 +11:00
dependabot[bot] 3674d49ab4 Bump jackson.version from 2.15.3 to 2.16.0 
Bumps `jackson.version` from 2.15.3 to 2.16.0.

Updates `com.fasterxml.jackson.core:jackson-core` from 2.15.3 to 2.16.0
- [Release notes](https://github.com/FasterXML/jackson-core/releases)
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.15.3...jackson-core-2.16.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.15.3 to 2.16.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.15.3 to 2.16.0
- [Commits](https://github.com/FasterXML/jackson-dataformat-xml/compare/jackson-dataformat-xml-2.15.3...jackson-dataformat-xml-2.16.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-11-20 01:16:22 +00:00
Kusal Kithul-Godage 05a99733fb Merge branch 'master' into WW-5343-sec-extend 2023-11-17 15:42:45 +11:00
Kusal Kithul-Godage 68f5584d9f WW-5343 Remove defunct test now that constant is required 2023-11-17 15:42:36 +11:00
Kusal Kithul-Godage d0d10d9389 WW-5343 Fix MemberAccess access blocked tests 2023-11-17 15:42:20 +11:00
Kusal Kithul-Godage a402e5c80a WW-5343 Revert and fix serializability 2023-11-17 15:28:14 +11:00
Kusal Kithul-Godage f87d7d7340 WW-5343 Add missing license 2023-11-17 11:38:50 +11:00
Kusal Kithul-Godage ceff6cde03 WW-5343 Remove unnecessary method 2023-11-16 23:06:13 +11:00
Kusal Kithul-Godage 63b0da3a7f Merge pull request #793 from apache/WW-5363-velocity-order-2 
WW-5363 Remove redundant method from VelocityManager
 2023-11-15 16:42:44 +11:00
Kusal Kithul-Godage 0504e7076c WW-5363 Remove redundant method from VelocityManager 2023-11-15 16:08:46 +11:00
Kusal Kithul-Godage 9f45983dac Merge pull request #781 from apache/WW-5350-allowlist-2 
WW-5350 Implement OGNL Allowlist capability
 2023-11-15 00:39:26 +11:00
Kusal Kithul-Godage f989f370bb Merge pull request #789 from apache/issue/WW-5363-velocity-order 
WW-5363 Velocity: read chained contexts before ValueStack
 2023-11-15 00:37:02 +11:00