 jdyer1
|
380b157bef
|
WN-5141
- use servlet api mocks from Spring instead of MockObjects
|
2023-12-16 10:46:57 +01:00 |
|
|
jdyer1
|
42fed67a85
|
WW-5141 TODO: TEMPORARY comment-out incomaptible commons-upload old version code
|
2023-12-16 10:46:44 +01:00 |
|
|
jdyer1
|
09feb9bf06
|
Revert "WN-5141"
This reverts commit d132c43865.
|
2023-12-16 10:40:36 +01:00 |
|
|
jdyer1
|
2e528eb66a
|
WN-5141
- TODO: TEMPORARY comment-out problematic Freemarker code
|
2023-12-16 10:40:36 +01:00 |
|
|
jdyer1
|
11284a0423
|
WN-5141
- update commons-upload to jakarta-compatible version
|
2023-12-16 10:40:36 +01:00 |
|
|
jdyer1
|
841313ec1f
|
WN-5141
- more portlet removals
|
2023-12-16 10:40:35 +01:00 |
|
|
jdyer1
|
a5c139114c
|
WN-5141
- more removals for "pell multipart"
|
2023-12-16 10:40:35 +01:00 |
|
|
jdyer1
|
0c35a6bf88
|
IPAGE-5141
- s/javax.servlet/jakarta.servlet/g - to fix runtime usages: attribute names, etc, messaging. Also changes code comments
|
2023-12-16 10:40:12 +01:00 |
|
|
jdyer1
|
2202e5fbbb
|
WW-5141
- initial attempt to update references javax>jakarta and get things to compile
|
2023-12-16 10:39:28 +01:00 |
|
|
Lukasz Lenart
|
f4501846c6
|
Merge pull request #808 from apache/feature/WW-5371-modern-upload
[WW-5371] Modern upload
|
2023-12-15 10:06:35 +01:00 |
|
|
Lukasz Lenart
|
64c13cc746
|
WW-5370 Simplifies error handling logic
|
2023-12-15 09:38:43 +01:00 |
|
|
Lukasz Lenart
|
102e040e09
|
WW-5370 Adds proper logic to handle null
|
2023-12-12 10:00:31 +01:00 |
|
|
Lukasz Lenart
|
4eaab8a79d
|
WW-5370 Simplifies code
|
2023-12-12 09:48:45 +01:00 |
|
|
Lukasz Lenart
|
c40978f8cd
|
WW-5370 Uses TreeMap with case-insensitive comparator
|
2023-12-12 08:52:57 +01:00 |
|
|
Lukasz Lenart
|
3ef9ade890
|
WW-5371 Document how to use the new file upload logic
|
2023-12-12 08:35:31 +01:00 |
|
|
Lukasz Lenart
|
3ce3f82646
|
WW-5371 Simplifies file upload logic and extracts constants
|
2023-12-11 08:55:20 +01:00 |
|
|
Lukasz Lenart
|
dc4103bcb5
|
WW-5371 Uses the new upload mechanism in Showcase app
|
2023-12-11 07:56:38 +01:00 |
|
|
Lukasz Lenart
|
0bc0217b9d
|
WW-5371 Implements action based file upload
|
2023-12-11 07:37:38 +01:00 |
|
|
Lukasz Lenart
|
13d972d6ee
|
WW-5370 Makes HttpParameters case-insensitive
|
2023-12-10 13:14:55 +01:00 |
|
|
Kusal Kithul-Godage
|
002e598b75
|
WW-5339 Add option to block custom OGNL maps
|
2023-12-05 13:18:48 +11:00 |
|
|
Kusal Kithul-Godage
|
48a82feada
|
WW-5339 Make ClassResolver a bean
|
2023-12-05 13:05:03 +11:00 |
|
|
Kusal Kithul-Godage
|
589219baac
|
WW-5343 Add missing licenses
|
2023-12-04 21:58:07 +11:00 |
|
|
Kusal Kithul-Godage
|
a26823386c
|
WW-5343 Add integration tests for ConfigurationProvider populating ProviderAllowlist
|
2023-12-04 21:48:22 +11:00 |
|
|
Kusal Kithul-Godage
|
16f822a2b2
|
WW-5343 Move JUnit4 test case into Struts-core
|
2023-12-03 23:36:10 +11:00 |
|
|
Kusal Kithul-Godage
|
5e33c7f2c4
|
WW-5343 Add unit test coverage for ProviderAllowlist
|
2023-12-03 23:22:06 +11:00 |
|
|
Kusal Kithul-Godage
|
d030532d61
|
WW-5343 Collect bootstrap factories
|
2023-11-26 23:46:31 +11:00 |
|
|
Kusal Kithul-Godage
|
0566a207f4
|
Merge branch 'WW-5343-sec-extend' into WW-5364-populate-allowlist
# Conflicts:
# core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
|
2023-11-26 18:24:44 +11:00 |
|
|
Kusal Kithul-Godage
|
7929d8634c
|
WW-5343 Address SonarCloud code smells
|
2023-11-26 17:02:34 +11:00 |
|
|
Kusal Kithul-Godage
|
85d2c742cd
|
WW-5343 Clean up bootstrap constants
|
2023-11-26 16:52:07 +11:00 |
|
|
Kusal Kithul-Godage
|
6657e01f9b
|
WW-5364 Don't throw ConfigurationException on unloadable action or interceptor classes
|
2023-11-24 22:41:23 +11:00 |
|
|
Kusal Kithul-Godage
|
39c3e332d7
|
WW-5364 Add Struts components to allowlist
|
2023-11-24 22:41:23 +11:00 |
|
|
Kusal Kithul-Godage
|
ee442db9ed
|
WW-5364 Enable allowlist for showcase
|
2023-11-24 21:32:33 +11:00 |
|
|
Kusal Kithul-Godage
|
3bf3e5f8db
|
WW-5364 Inject ProviderAllowlist into SecurityMemberAccess
|
2023-11-24 21:32:33 +11:00 |
|
|
Kusal Kithul-Godage
|
198812fe8b
|
WW-5364 Implement provider allowlist
|
2023-11-24 21:32:33 +11:00 |
|
|
Kusal Kithul-Godage
|
1d76bff95e
|
WW-5364 Make allowlist classloader specific
|
2023-11-24 21:07:23 +11:00 |
|
|
Kusal Kithul-Godage
|
ebdf019959
|
WW-5364 Modify XmlDocConfigurationProvider to be able to load into allowlist
|
2023-11-24 21:07:23 +11:00 |
|
|
Kusal Kithul-Godage
|
eba79a7844
|
WW-5343 Fix final test
|
2023-11-23 01:09:49 +11:00 |
|
|
Kusal Kithul-Godage
|
9640f5bde0
|
WW-5343 Migrate tests to SecurityMemberAccessTest
|
2023-11-23 01:00:14 +11:00 |
|
|
Kusal Kithul-Godage
|
05a99733fb
|
Merge branch 'master' into WW-5343-sec-extend
|
2023-11-17 15:42:45 +11:00 |
|
|
Kusal Kithul-Godage
|
68f5584d9f
|
WW-5343 Remove defunct test now that constant is required
|
2023-11-17 15:42:36 +11:00 |
|
|
Kusal Kithul-Godage
|
d0d10d9389
|
WW-5343 Fix MemberAccess access blocked tests
|
2023-11-17 15:42:20 +11:00 |
|
|
Kusal Kithul-Godage
|
a402e5c80a
|
WW-5343 Revert and fix serializability
|
2023-11-17 15:28:14 +11:00 |
|
|
Kusal Kithul-Godage
|
f87d7d7340
|
WW-5343 Add missing license
|
2023-11-17 11:38:50 +11:00 |
|
|
Kusal Kithul-Godage
|
ceff6cde03
|
WW-5343 Remove unnecessary method
|
2023-11-16 23:06:13 +11:00 |
|
|
Kusal Kithul-Godage
|
9f45983dac
|
Merge pull request #781 from apache/WW-5350-allowlist-2
WW-5350 Implement OGNL Allowlist capability
|
2023-11-15 00:39:26 +11:00 |
|
|
Kusal Kithul-Godage
|
62988f783f
|
WW-5343 Fix unit test compilation errors
|
2023-11-15 00:30:12 +11:00 |
|
|
Kusal Kithul-Godage
|
8bf47b3679
|
WW-5343 Fix OgnlUtilTest#testBeanMapExpressions
|
2023-11-15 00:28:46 +11:00 |
|
|
Kusal Kithul-Godage
|
4490d9d772
|
WW-5343 Move configuration injection from OgnlUtil to SecurityMemberAccess
|
2023-11-15 00:25:29 +11:00 |
|
|
Kusal Kithul-Godage
|
b518635e2e
|
WW-5343 Update OgnlUtil#createDefaultContext to utilise SecurityMemberAccess bean
|
2023-11-15 00:24:39 +11:00 |
|
|
Kusal Kithul-Godage
|
7e92a8d7b4
|
WW-5343 Refactor OgnlValueStackFactory to utilise SecurityMemberAccess bean
|
2023-11-15 00:23:51 +11:00 |
|