Commit Graph

6980 Commits

Author SHA1 Message Date
dependabot[bot] 96618ebbdf Bump org.apache.commons:commons-compress from 1.23.0 to 1.25.0
Bumps org.apache.commons:commons-compress from 1.23.0 to 1.25.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-01 09:58:53 +00:00
Lukasz Lenart afa40c17ec Merge pull request #818 from apache/dependabot/maven/org.apache.commons-commons-compress-1.24.0
Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0
2024-01-01 10:57:29 +01:00
Lukasz Lenart 52f14721e0 Merge pull request #816 from apache/dependabot/github_actions/actions/upload-artifact-4.0.0
Bump actions/upload-artifact from 3.1.3 to 4.0.0
2024-01-01 10:56:44 +01:00
Lukasz Lenart 3dabcf127b Merge pull request #812 from apache/feature/WW-5362-remove-type
[WW-5362] Removes type attribute out of <s:script/> tag
2024-01-01 10:54:55 +01:00
Lukasz Lenart b9c797e1b4 WW-5362 Removes deprecated language attribute
Co-authored-by: Sebastian Peters <sebastian.peters@gmail.com>
2023-12-19 16:19:21 +01:00
Lukasz Lenart 80038f0ca1 WW-5362 Removes language attribute
Co-authored-by: Sebastian Peters <sebastian.peters@gmail.com>
2023-12-18 16:43:42 +01:00
Lukasz Lenart b5e07903f2 Merge pull request #811 from apache/feature/WW-5328-removes-deprecated
[WW-5328] Removes deprecated setters
2023-12-18 16:41:42 +01:00
Lukasz Lenart 92227bb51e Merge pull request #814 from assachs/master
[WW-5373] Update JavaDoc CspReportAction.java
2023-12-18 07:14:43 +01:00
dependabot[bot] e98f6ffe5a Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0
Bumps org.apache.commons:commons-compress from 1.23.0 to 1.24.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 05:54:58 +00:00
Lukasz Lenart 3aeff1c690 Merge pull request #817 from apache/dependabot/github_actions/github/codeql-action-3
Bump github/codeql-action from 2 to 3
2023-12-18 06:54:33 +01:00
Kusal Kithul-Godage 545292561d Merge pull request #815 from apache/WW-5364-fix-map-access 2023-12-18 16:52:34 +11:00
dependabot[bot] 517d18bc44 Bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 01:27:20 +00:00
dependabot[bot] f0ac0a9ade Bump actions/upload-artifact from 3.1.3 to 4.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...c7d193f32edcb7bfad88892161225aeda64e9392)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 01:26:49 +00:00
Kusal Kithul-Godage 5aeecd2d1b WW-5364 Add missing system allowlist classes 2023-12-18 10:59:25 +11:00
assachs 8965c575cd Update CspReportAction.java WW-5373
WW-5373 
change java comment
2023-12-17 23:34:24 +01:00
Lukasz Lenart 4bc19c773e Merge pull request #813 from apache/feature/jenkins-pipeline-struts-7
Builds Struts 7 as part of the main pipeline
2023-12-17 17:23:49 +01:00
Lukasz Lenart 165e464a12 Builds Struts 7 as part of the main pipeline 2023-12-17 16:50:17 +01:00
Lukasz Lenart 94dd7a5267 WW-5362 Removes type attribute out of <s:script/> tag 2023-12-17 16:40:22 +01:00
Lukasz Lenart e8881f6644 WW-5328 Removes deprecated setters 2023-12-17 16:14:41 +01:00
Lukasz Lenart f4501846c6 Merge pull request #808 from apache/feature/WW-5371-modern-upload
[WW-5371] Modern upload
2023-12-15 10:06:35 +01:00
Lukasz Lenart 64c13cc746 WW-5370 Simplifies error handling logic 2023-12-15 09:38:43 +01:00
Lukasz Lenart f684effd9a Merge pull request #807 from apache/feature/http-params-case
[WW-5370] Makes HttpParameters case-insensitive
2023-12-12 10:26:17 +01:00
Lukasz Lenart 102e040e09 WW-5370 Adds proper logic to handle null 2023-12-12 10:00:31 +01:00
Lukasz Lenart 4eaab8a79d WW-5370 Simplifies code 2023-12-12 09:48:45 +01:00
Lukasz Lenart c40978f8cd WW-5370 Uses TreeMap with case-insensitive comparator 2023-12-12 08:52:57 +01:00
Lukasz Lenart 3ef9ade890 WW-5371 Document how to use the new file upload logic 2023-12-12 08:35:31 +01:00
Lukasz Lenart 3ce3f82646 WW-5371 Simplifies file upload logic and extracts constants 2023-12-11 08:55:20 +01:00
Lukasz Lenart dc4103bcb5 WW-5371 Uses the new upload mechanism in Showcase app 2023-12-11 07:56:38 +01:00
Lukasz Lenart 0bc0217b9d WW-5371 Implements action based file upload 2023-12-11 07:37:38 +01:00
Lukasz Lenart 13d972d6ee WW-5370 Makes HttpParameters case-insensitive 2023-12-10 13:14:55 +01:00
Kusal Kithul-Godage 6fcb50122d Merge pull request #806 from apache/WW-5339-astmap-block
WW-5339 Add option to block custom OGNL maps
2023-12-05 17:36:14 +11:00
Kusal Kithul-Godage 80e83616b1 Merge pull request #800 from apache/WW-5364-populate-allowlist
WW-5364 Automatically populate OGNL allowlist
2023-12-05 16:57:17 +11:00
Kusal Kithul-Godage 002e598b75 WW-5339 Add option to block custom OGNL maps 2023-12-05 13:18:48 +11:00
Kusal Kithul-Godage 48a82feada WW-5339 Make ClassResolver a bean 2023-12-05 13:05:03 +11:00
Kusal Kithul-Godage a7d273c1f0 WW-5343 Make StrutsTestCase extend same package 2023-12-04 22:40:39 +11:00
Kusal Kithul-Godage 589219baac WW-5343 Add missing licenses 2023-12-04 21:58:07 +11:00
Kusal Kithul-Godage a26823386c WW-5343 Add integration tests for ConfigurationProvider populating ProviderAllowlist 2023-12-04 21:48:22 +11:00
dependabot[bot] cf4523fba5 Bump actions/setup-java from 3 to 4 (#804)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 06:36:59 +01:00
Kusal Kithul-Godage 16f822a2b2 WW-5343 Move JUnit4 test case into Struts-core 2023-12-03 23:36:10 +11:00
Kusal Kithul-Godage 5e33c7f2c4 WW-5343 Add unit test coverage for ProviderAllowlist 2023-12-03 23:22:06 +11:00
Kusal Kithul-Godage 9aff37a83b Merge branch 'master' into WW-5364-populate-allowlist 2023-11-26 23:46:44 +11:00
Kusal Kithul-Godage d030532d61 WW-5343 Collect bootstrap factories 2023-11-26 23:46:31 +11:00
Kusal Kithul-Godage a60842af79 Merge pull request #791 from apache/WW-5343-sec-extend
WW-5343 Make SecurityMemberAccess an extensible bean
2023-11-26 19:36:56 +11:00
Kusal Kithul-Godage 0566a207f4 Merge branch 'WW-5343-sec-extend' into WW-5364-populate-allowlist
# Conflicts:
#	core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
2023-11-26 18:24:44 +11:00
Kusal Kithul-Godage 7929d8634c WW-5343 Address SonarCloud code smells 2023-11-26 17:02:34 +11:00
Kusal Kithul-Godage 85d2c742cd WW-5343 Clean up bootstrap constants 2023-11-26 16:52:07 +11:00
Kusal Kithul-Godage d7df9ce998 WW-5364 Replace some allowlist classes with packages 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage 6657e01f9b WW-5364 Don't throw ConfigurationException on unloadable action or interceptor classes 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage 39c3e332d7 WW-5364 Add Struts components to allowlist 2023-11-24 22:41:23 +11:00
Kusal Kithul-Godage ee442db9ed WW-5364 Enable allowlist for showcase 2023-11-24 21:32:33 +11:00