a75a873646
WW-5340 Repackage OgnlGuard
2023-09-27 21:59:58 +10:00
f69364bf63
WW-5340 Rename DefaultOgnlGuard to StrutsOgnlGuard
2023-09-26 19:16:40 +10:00
a4a0d70aa9
WW-5340 Refactor OgnlGuard to do the parsing
2023-09-26 19:11:00 +10:00
4ff700e9a8
WW-5340 Add unit tests
2023-09-26 19:11:00 +10:00
25585617f1
WW-5340 Fix tests
2023-09-26 19:10:57 +10:00
19d26b29a2
Merge pull request #746 from apache/WW-5340-ognlutil-refactor
...
WW-5340 Preliminary refactor of OgnlUtil
2023-09-26 11:06:16 +02:00
fde2b70fab
Merge pull request #745 from apache/WW-5339-cleanup
...
WW-5339 Misc clean up in CompoundRootAccessor and OgnlValueStackTest
2023-09-26 10:15:26 +02:00
13f0591ca1
WW-5340 Remove redundant check on #setValue
2023-08-31 17:22:48 +10:00
ff79c1b041
WW-5342 Implement default off option
2023-08-30 23:06:22 +10:00
7bd31cf315
WW-5339 Clean up OgnlValueStackTest
2023-08-30 18:11:05 +10:00
7c1c674a02
WW-5341 Add unit test for excluded pattern validation
2023-08-30 12:35:48 +10:00
a352132f00
WW-5341 Clean up OgnlUtilTest
2023-08-30 12:35:48 +10:00
1bbcc17c74
WW-5341 Split package exclusion check
2023-08-30 12:35:48 +10:00
c57015749d
WW-5341 Further refactor of OgnlUtil and SecurityMemberAccess to store excluded classes as Strings
2023-08-30 12:35:48 +10:00
215541146d
WW-5336 Correct assertions and add test case
2023-08-22 16:35:29 +10:00
3b515b1a78
WW-5336 Fix visibility warnings
2023-08-22 16:34:29 +10:00
0f068d37ae
WW-5336 Reduce cognitive complexity #makeSelectList
2023-08-22 11:57:30 +10:00
12cd92cb62
WW-5336 Clean up StrutsUtil
2023-08-22 11:57:30 +10:00
e75f8d82b5
Merge pull request #736 from apache/WW-5337-exclusion-performance
...
WW-5337 Make SecurityMemberAccess exclusion checking more performant
2023-08-22 11:28:36 +10:00
270ec4ad71
WW-5337 Fix #testPackageNameExclusionAsCommaDelimited
2023-08-21 23:59:00 +10:00
a228b14a48
WW-5337 Drop superinterface/superclass banning test
2023-08-21 23:58:42 +10:00
f31ba637c8
Merge pull request #727 from apache/fix/WW-5331-proper-get
...
[WW-5331] Uses proper signature of get()
2023-08-21 15:39:16 +02:00
710ec2edb9
WW-5331 Adds tests covering ApplicationMap
2023-08-17 13:22:06 +02:00
e8287ddeef
WW-5331 Adds missing header with licence
2023-08-17 12:53:55 +02:00
e1a80789f1
WW-5331 Covers new logic with tests
2023-08-17 12:51:20 +02:00
2e0764f9da
Merge pull request #729 from apache/fix/WW-5327-removes-duplicate
...
[WW-5327] Removes duplicated exclusion
2023-08-17 12:41:29 +03:00
5aa1d076b2
Increases wait time to avoid failing test
2023-08-17 10:52:01 +02:00
956a956efb
WW-5327 Removes duplicated exclusion
...
Refs #715
2023-08-17 10:47:29 +02:00
9780e70648
WW-5332 Add additional test cases
2023-08-17 13:48:22 +10:00
ec4dfa3e96
WW-5332 Add validation for package name parsing
2023-08-17 13:32:00 +10:00
ce4015739a
Extends exclusion list
2023-07-31 10:39:02 +02:00
bb1a34daae
WW-5327 Stops using JavaBeans notation for setters
2023-07-30 08:25:33 +02:00
7a92cdcbec
Merge pull request #692 from apache/WW-5310-fragment
...
[WW-5310] Supports fragment in URL
2023-06-28 08:55:46 +02:00
4a85b6c4f4
WW-5310 Deprecates the old API in favour of new one
2023-06-27 20:18:38 +02:00
13013e7565
Merge pull request #691 from apache/WW-5261-tag-utils
...
[WW-5261] Avoids creating ValueStack if no ActionContext is available
2023-06-19 09:27:17 +02:00
5a67d58b75
add some improvements
2023-06-04 14:22:49 +04:30
93304a3ee5
WW-5261 Avoids creating ValueStack if no ActionContext is available
2023-05-29 15:55:22 +02:00
97137bd0f9
WW-5310 Supports fragment in URL
2023-05-29 15:52:38 +02:00
269a102749
Update:
...
- Add a few additional tests to SecurityMemberAccessTest.
- Rename some existing tests involving non-static methods to more
accurately reflect that.
- Add one minor optimization to SecurityMemberAccess.
2023-05-28 19:43:47 -04:00
6d0a4bb0c6
Merge pull request #689 from apache/WW-5310-equal-sign
...
[WW-5310] Properly parses param value with equal sign
2023-05-28 09:12:56 +02:00
c92f542180
Merge pull request #688 from JCgH4164838Gh792C124B5/localS2_62_ExecWaitCleanup
...
[WW-5312] Attempt to fix ExecuteAndWaitInterceptor inconsistent processing
2023-05-28 09:07:46 +02:00
b97339e31e
WW-5310 Properly parses param value with equal sign
2023-05-24 07:06:15 +02:00
dd01a47ddb
Update:
...
- Improve ExecuteAndWaitInterceptor state behaviour, added debug and trace
logging.
- Ensure StrutsBackgroundProcess thread done state always set on
completion.
- Fix SessionMap processing issue caused by divergence of method
signatures, which can result in the ancestor methods getting called
(bypassing actual session processing).
- Update SessionMapTest to correspond to changes, add tests to try and
detect some (put/remove) method signature behaviour changes.
2023-05-20 18:05:04 -04:00
9a7398f9af
WW-5301 Fix custom VelocityManager bean selection
2023-05-20 19:56:11 +10:00
50be77a788
Merge pull request #686 from apache/WW-5309-named-matcher
...
[WW-5309] Supports patterns starting with variable
2023-05-19 12:21:50 +02:00
1df2f0a365
WW-5309 Supports patterns starting with variable
2023-05-16 20:44:55 +02:00
1eedfe329b
Merge pull request #678 from apache/WW-5302-unevaluated-id
...
[WW-5302] Evaluates the name attribute before assigning it to the id attribute
2023-05-16 20:18:17 +02:00
f9f05dc979
WW-5302 Adds additional test case to cover evaluating action & method attribute at the same time
2023-05-16 20:00:18 +02:00
f0f9e42fa9
WW-5304 Drops deprecated methods and fields in ActionContext
2023-04-10 15:12:11 +02:00
a6608c16d2
WW-5302 Evaluates attributes before using them to generate the id attribute
2023-04-10 11:01:48 +02:00
Kusal Kithul-Godage