1271 Commits

Author	SHA1	Message	Date
Lukasz Lenart	0bc0217b9d	WW-5371 Implements action based file upload	2023-12-11 07:37:38 +01:00
Kusal Kithul-Godage	002e598b75	WW-5339 Add option to block custom OGNL maps	2023-12-05 13:18:48 +11:00
Kusal Kithul-Godage	589219baac	WW-5343 Add missing licenses	2023-12-04 21:58:07 +11:00
Kusal Kithul-Godage	a26823386c	WW-5343 Add integration tests for ConfigurationProvider populating ProviderAllowlist	2023-12-04 21:48:22 +11:00
Kusal Kithul-Godage	5e33c7f2c4	WW-5343 Add unit test coverage for ProviderAllowlist	2023-12-03 23:22:06 +11:00
Kusal Kithul-Godage	0566a207f4	Merge branch 'WW-5343-sec-extend' into WW-5364-populate-allowlist ... # Conflicts: # core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java	2023-11-26 18:24:44 +11:00
Kusal Kithul-Godage	7929d8634c	WW-5343 Address SonarCloud code smells	2023-11-26 17:02:34 +11:00
Kusal Kithul-Godage	85d2c742cd	WW-5343 Clean up bootstrap constants	2023-11-26 16:52:07 +11:00
Kusal Kithul-Godage	3bf3e5f8db	WW-5364 Inject ProviderAllowlist into SecurityMemberAccess	2023-11-24 21:32:33 +11:00
Kusal Kithul-Godage	eba79a7844	WW-5343 Fix final test	2023-11-23 01:09:49 +11:00
Kusal Kithul-Godage	9640f5bde0	WW-5343 Migrate tests to SecurityMemberAccessTest	2023-11-23 01:00:14 +11:00
Kusal Kithul-Godage	05a99733fb	Merge branch 'master' into WW-5343-sec-extend	2023-11-17 15:42:45 +11:00
Kusal Kithul-Godage	68f5584d9f	WW-5343 Remove defunct test now that constant is required	2023-11-17 15:42:36 +11:00
Kusal Kithul-Godage	d0d10d9389	WW-5343 Fix MemberAccess access blocked tests	2023-11-17 15:42:20 +11:00
Kusal Kithul-Godage	9f45983dac	Merge pull request #781 from apache/WW-5350-allowlist-2 ... WW-5350 Implement OGNL Allowlist capability	2023-11-15 00:39:26 +11:00
Kusal Kithul-Godage	62988f783f	WW-5343 Fix unit test compilation errors	2023-11-15 00:30:12 +11:00
Kusal Kithul-Godage	8bf47b3679	WW-5343 Fix OgnlUtilTest#testBeanMapExpressions	2023-11-15 00:28:46 +11:00
Lukasz Lenart	4a206d83f8	Merge pull request #779 from apache/feature/WW-5333-attribute-map ... [WW-5333] Refactors AttributeMap	2023-11-12 21:48:04 +01:00
Lukasz Lenart	f326ce3277	WW-5333 Refactors AttributeMap	2023-11-12 20:04:07 +01:00
Kusal Kithul-Godage	bef9769170	WW-5350 Implement OGNL Allowlist capability	2023-11-05 23:21:09 +11:00
Kusal Kithul-Godage	39787947f1	WW-5350 Fix static member test	2023-11-05 20:13:05 +11:00
Kusal Kithul-Godage	82647959b2	WW-5350 Refactor SecurityMemberAccess	2023-11-05 20:13:05 +11:00
Kusal Kithul-Godage	7afc77266b	WW-5355 Bootstrap using basic cache	2023-10-17 14:17:32 +11:00
Kusal Kithul-Godage	7463e1de13	WW-5355 Fix interface and unit test bug	2023-10-15 23:57:04 +11:00
Kusal Kithul-Godage	d245dc5513	WW-5355 Introduce new cache type selection methods and deprecate problematic setter injection	2023-10-15 23:35:52 +11:00
Kusal Kithul-Godage	67da669f05	Merge pull request #765 from apache/WW-5354-block-params ... WW-5354 Ensure ActionSupport fields are not parameter injectable	2023-10-13 11:40:57 +11:00
Kusal Kithul-Godage	f2834d2529	Merge pull request #764 from apache/gh-actions-sonar-21 ... Add JDK 21 build	2023-10-13 11:40:16 +11:00
Kusal Kithul-Godage	0432205a68	WW-5354 Ensure ActionSupport fields are not parameter injectable	2023-10-12 21:31:16 +11:00
Kusal Kithul-Godage	00db84468d	Convert test class to JUnit4	2023-10-12 03:11:59 +11:00
Kusal Kithul-Godage	9c12bb86b5	Fix JDK 21 build	2023-10-12 03:11:59 +11:00
Kusal Kithul-Godage	6995eaf2f9	WW-5349 Remove corresponding unit tests	2023-10-09 15:52:58 +11:00
Kusal Kithul-Godage	a75a873646	WW-5340 Repackage OgnlGuard	2023-09-27 21:59:58 +10:00
Kusal Kithul-Godage	f69364bf63	WW-5340 Rename DefaultOgnlGuard to StrutsOgnlGuard	2023-09-26 19:16:40 +10:00
Kusal Kithul-Godage	a4a0d70aa9	WW-5340 Refactor OgnlGuard to do the parsing	2023-09-26 19:11:00 +10:00
Kusal Kithul-Godage	4ff700e9a8	WW-5340 Add unit tests	2023-09-26 19:11:00 +10:00
Kusal Kithul-Godage	25585617f1	WW-5340 Fix tests	2023-09-26 19:10:57 +10:00
Lukasz Lenart	19d26b29a2	Merge pull request #746 from apache/WW-5340-ognlutil-refactor ... WW-5340 Preliminary refactor of OgnlUtil	2023-09-26 11:06:16 +02:00
Lukasz Lenart	fde2b70fab	Merge pull request #745 from apache/WW-5339-cleanup ... WW-5339 Misc clean up in CompoundRootAccessor and OgnlValueStackTest	2023-09-26 10:15:26 +02:00
Kusal Kithul-Godage	13f0591ca1	WW-5340 Remove redundant check on #setValue	2023-08-31 17:22:48 +10:00
Kusal Kithul-Godage	ff79c1b041	WW-5342 Implement default off option	2023-08-30 23:06:22 +10:00
Kusal Kithul-Godage	7bd31cf315	WW-5339 Clean up OgnlValueStackTest	2023-08-30 18:11:05 +10:00
Kusal Kithul-Godage	7c1c674a02	WW-5341 Add unit test for excluded pattern validation	2023-08-30 12:35:48 +10:00
Kusal Kithul-Godage	a352132f00	WW-5341 Clean up OgnlUtilTest	2023-08-30 12:35:48 +10:00
Kusal Kithul-Godage	1bbcc17c74	WW-5341 Split package exclusion check	2023-08-30 12:35:48 +10:00
Kusal Kithul-Godage	c57015749d	WW-5341 Further refactor of OgnlUtil and SecurityMemberAccess to store excluded classes as Strings	2023-08-30 12:35:48 +10:00
Kusal Kithul-Godage	215541146d	WW-5336 Correct assertions and add test case	2023-08-22 16:35:29 +10:00
Kusal Kithul-Godage	3b515b1a78	WW-5336 Fix visibility warnings	2023-08-22 16:34:29 +10:00
Kusal Kithul-Godage	0f068d37ae	WW-5336 Reduce cognitive complexity #makeSelectList	2023-08-22 11:57:30 +10:00
Kusal Kithul-Godage	12cd92cb62	WW-5336 Clean up StrutsUtil	2023-08-22 11:57:30 +10:00
Kusal Kithul-Godage	e75f8d82b5	Merge pull request #736 from apache/WW-5337-exclusion-performance ... WW-5337 Make SecurityMemberAccess exclusion checking more performant	2023-08-22 11:28:36 +10:00