dependabot[bot]
|
96618ebbdf
|
Bump org.apache.commons:commons-compress from 1.23.0 to 1.25.0
Bumps org.apache.commons:commons-compress from 1.23.0 to 1.25.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-01-01 09:58:53 +00:00 |
|
Lukasz Lenart
|
afa40c17ec
|
Merge pull request #818 from apache/dependabot/maven/org.apache.commons-commons-compress-1.24.0
Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0
|
2024-01-01 10:57:29 +01:00 |
|
Lukasz Lenart
|
52f14721e0
|
Merge pull request #816 from apache/dependabot/github_actions/actions/upload-artifact-4.0.0
Bump actions/upload-artifact from 3.1.3 to 4.0.0
|
2024-01-01 10:56:44 +01:00 |
|
Lukasz Lenart
|
3dabcf127b
|
Merge pull request #812 from apache/feature/WW-5362-remove-type
[WW-5362] Removes type attribute out of <s:script/> tag
|
2024-01-01 10:54:55 +01:00 |
|
Lukasz Lenart
|
b9c797e1b4
|
WW-5362 Removes deprecated language attribute
Co-authored-by: Sebastian Peters <sebastian.peters@gmail.com>
|
2023-12-19 16:19:21 +01:00 |
|
Lukasz Lenart
|
80038f0ca1
|
WW-5362 Removes language attribute
Co-authored-by: Sebastian Peters <sebastian.peters@gmail.com>
|
2023-12-18 16:43:42 +01:00 |
|
Lukasz Lenart
|
b5e07903f2
|
Merge pull request #811 from apache/feature/WW-5328-removes-deprecated
[WW-5328] Removes deprecated setters
|
2023-12-18 16:41:42 +01:00 |
|
Lukasz Lenart
|
92227bb51e
|
Merge pull request #814 from assachs/master
[WW-5373] Update JavaDoc CspReportAction.java
|
2023-12-18 07:14:43 +01:00 |
|
dependabot[bot]
|
e98f6ffe5a
|
Bump org.apache.commons:commons-compress from 1.23.0 to 1.24.0
Bumps org.apache.commons:commons-compress from 1.23.0 to 1.24.0.
---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-18 05:54:58 +00:00 |
|
Lukasz Lenart
|
3aeff1c690
|
Merge pull request #817 from apache/dependabot/github_actions/github/codeql-action-3
Bump github/codeql-action from 2 to 3
|
2023-12-18 06:54:33 +01:00 |
|
Kusal Kithul-Godage
|
545292561d
|
Merge pull request #815 from apache/WW-5364-fix-map-access
|
2023-12-18 16:52:34 +11:00 |
|
dependabot[bot]
|
517d18bc44
|
Bump github/codeql-action from 2 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-18 01:27:20 +00:00 |
|
dependabot[bot]
|
f0ac0a9ade
|
Bump actions/upload-artifact from 3.1.3 to 4.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.3 to 4.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...c7d193f32edcb7bfad88892161225aeda64e9392)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2023-12-18 01:26:49 +00:00 |
|
Kusal Kithul-Godage
|
5aeecd2d1b
|
WW-5364 Add missing system allowlist classes
|
2023-12-18 10:59:25 +11:00 |
|
assachs
|
8965c575cd
|
Update CspReportAction.java WW-5373
WW-5373
change java comment
|
2023-12-17 23:34:24 +01:00 |
|
Lukasz Lenart
|
4bc19c773e
|
Merge pull request #813 from apache/feature/jenkins-pipeline-struts-7
Builds Struts 7 as part of the main pipeline
|
2023-12-17 17:23:49 +01:00 |
|
Lukasz Lenart
|
165e464a12
|
Builds Struts 7 as part of the main pipeline
|
2023-12-17 16:50:17 +01:00 |
|
Lukasz Lenart
|
94dd7a5267
|
WW-5362 Removes type attribute out of <s:script/> tag
|
2023-12-17 16:40:22 +01:00 |
|
Lukasz Lenart
|
e8881f6644
|
WW-5328 Removes deprecated setters
|
2023-12-17 16:14:41 +01:00 |
|
Lukasz Lenart
|
f4501846c6
|
Merge pull request #808 from apache/feature/WW-5371-modern-upload
[WW-5371] Modern upload
|
2023-12-15 10:06:35 +01:00 |
|
Lukasz Lenart
|
64c13cc746
|
WW-5370 Simplifies error handling logic
|
2023-12-15 09:38:43 +01:00 |
|
Lukasz Lenart
|
f684effd9a
|
Merge pull request #807 from apache/feature/http-params-case
[WW-5370] Makes HttpParameters case-insensitive
|
2023-12-12 10:26:17 +01:00 |
|
Lukasz Lenart
|
102e040e09
|
WW-5370 Adds proper logic to handle null
|
2023-12-12 10:00:31 +01:00 |
|
Lukasz Lenart
|
4eaab8a79d
|
WW-5370 Simplifies code
|
2023-12-12 09:48:45 +01:00 |
|
Lukasz Lenart
|
c40978f8cd
|
WW-5370 Uses TreeMap with case-insensitive comparator
|
2023-12-12 08:52:57 +01:00 |
|
Lukasz Lenart
|
3ef9ade890
|
WW-5371 Document how to use the new file upload logic
|
2023-12-12 08:35:31 +01:00 |
|
Lukasz Lenart
|
3ce3f82646
|
WW-5371 Simplifies file upload logic and extracts constants
|
2023-12-11 08:55:20 +01:00 |
|
Lukasz Lenart
|
dc4103bcb5
|
WW-5371 Uses the new upload mechanism in Showcase app
|
2023-12-11 07:56:38 +01:00 |
|
Lukasz Lenart
|
0bc0217b9d
|
WW-5371 Implements action based file upload
|
2023-12-11 07:37:38 +01:00 |
|
Lukasz Lenart
|
13d972d6ee
|
WW-5370 Makes HttpParameters case-insensitive
|
2023-12-10 13:14:55 +01:00 |
|
Kusal Kithul-Godage
|
6fcb50122d
|
Merge pull request #806 from apache/WW-5339-astmap-block
WW-5339 Add option to block custom OGNL maps
|
2023-12-05 17:36:14 +11:00 |
|
Kusal Kithul-Godage
|
80e83616b1
|
Merge pull request #800 from apache/WW-5364-populate-allowlist
WW-5364 Automatically populate OGNL allowlist
|
2023-12-05 16:57:17 +11:00 |
|
Kusal Kithul-Godage
|
002e598b75
|
WW-5339 Add option to block custom OGNL maps
|
2023-12-05 13:18:48 +11:00 |
|
Kusal Kithul-Godage
|
48a82feada
|
WW-5339 Make ClassResolver a bean
|
2023-12-05 13:05:03 +11:00 |
|
Kusal Kithul-Godage
|
a7d273c1f0
|
WW-5343 Make StrutsTestCase extend same package
|
2023-12-04 22:40:39 +11:00 |
|
Kusal Kithul-Godage
|
589219baac
|
WW-5343 Add missing licenses
|
2023-12-04 21:58:07 +11:00 |
|
Kusal Kithul-Godage
|
a26823386c
|
WW-5343 Add integration tests for ConfigurationProvider populating ProviderAllowlist
|
2023-12-04 21:48:22 +11:00 |
|
dependabot[bot]
|
cf4523fba5
|
Bump actions/setup-java from 3 to 4 (#804)
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3 to 4.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-04 06:36:59 +01:00 |
|
Kusal Kithul-Godage
|
16f822a2b2
|
WW-5343 Move JUnit4 test case into Struts-core
|
2023-12-03 23:36:10 +11:00 |
|
Kusal Kithul-Godage
|
5e33c7f2c4
|
WW-5343 Add unit test coverage for ProviderAllowlist
|
2023-12-03 23:22:06 +11:00 |
|
Kusal Kithul-Godage
|
9aff37a83b
|
Merge branch 'master' into WW-5364-populate-allowlist
|
2023-11-26 23:46:44 +11:00 |
|
Kusal Kithul-Godage
|
d030532d61
|
WW-5343 Collect bootstrap factories
|
2023-11-26 23:46:31 +11:00 |
|
Kusal Kithul-Godage
|
a60842af79
|
Merge pull request #791 from apache/WW-5343-sec-extend
WW-5343 Make SecurityMemberAccess an extensible bean
|
2023-11-26 19:36:56 +11:00 |
|
Kusal Kithul-Godage
|
0566a207f4
|
Merge branch 'WW-5343-sec-extend' into WW-5364-populate-allowlist
# Conflicts:
# core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
|
2023-11-26 18:24:44 +11:00 |
|
Kusal Kithul-Godage
|
7929d8634c
|
WW-5343 Address SonarCloud code smells
|
2023-11-26 17:02:34 +11:00 |
|
Kusal Kithul-Godage
|
85d2c742cd
|
WW-5343 Clean up bootstrap constants
|
2023-11-26 16:52:07 +11:00 |
|
Kusal Kithul-Godage
|
d7df9ce998
|
WW-5364 Replace some allowlist classes with packages
|
2023-11-24 22:41:23 +11:00 |
|
Kusal Kithul-Godage
|
6657e01f9b
|
WW-5364 Don't throw ConfigurationException on unloadable action or interceptor classes
|
2023-11-24 22:41:23 +11:00 |
|
Kusal Kithul-Godage
|
39c3e332d7
|
WW-5364 Add Struts components to allowlist
|
2023-11-24 22:41:23 +11:00 |
|
Kusal Kithul-Godage
|
ee442db9ed
|
WW-5364 Enable allowlist for showcase
|
2023-11-24 21:32:33 +11:00 |
|