Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-31 19:35:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,286 Commits 15 Branches 184 Tags
cb62cb4e9aa34de3b53bb05182abe870b4253cb9
Commit Graph

7286 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kusal Kithul-Godage cb62cb4e9a WW-5440 Fix OGNL allowlist compat with Convention plugin 2024-07-14 00:34:06 +10:00
Kusal Kithul-Godage 8b4c188d0f WW-5440 Fix Showcase App allowlist configuration 2024-07-13 21:57:26 +10:00
Kusal Kithul-Godage f9953938f7 WW-5440 Add missing annotations 2024-07-13 21:57:26 +10:00
Kusal Kithul-Godage 10edbce8d9 WW-5440 Fix MultipleFileUploadUsingArrayAction 2024-07-13 21:22:21 +10:00
Kusal Kithul-Godage 56c1291d2f WW-5440 Deprecate AnnotationParameterFilterInterceptor 2024-07-13 21:22:21 +10:00
Kusal Kithul-Godage fcc2c9d3ab WW-5441 Bump net.sf.jasperreports:jasperreports to 6.21.3 2024-07-13 18:52:57 +10:00
Lukasz Lenart 54e387dc6f [maven-release-plugin] prepare for next development iteration 2024-07-12 07:27:19 +02:00
Lukasz Lenart dbfb59cb7c [maven-release-plugin] prepare release STRUTS_6_5_0 STRUTS_6_5_0 2024-07-12 07:27:08 +02:00
Kusal Kithul-Godage d4a0f4fdde Merge pull request #982 from apache/WW-5428-stop-excessive-logging 
WW-5428 Stop excessive logging in DevMode
 2024-07-09 05:44:33 +10:00
Kusal Kithul-Godage 9fe1a4a031 WW-5428 Stop excessive logging in DevMode 2024-07-09 05:01:02 +10:00
Lukasz Lenart 3693ea2eec Merge pull request #978 from apache/dependabot/github_actions/actions/upload-artifact-4.3.4 
Bump actions/upload-artifact from 4.3.3 to 4.3.4
 2024-07-08 13:19:12 +02:00
Lukasz Lenart 7cb57087d3 Merge pull request #976 from apache/dependabot/maven/org.apache.maven.plugins-maven-failsafe-plugin-3.3.0 
Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0
 2024-07-08 13:18:59 +02:00
Kusal Kithul-Godage 398e104fe0 Merge pull request #979 from apache/WW-5439-fix-dev-mode 
WW-5439 Move DevMode security configuration to SecurityMemberAccess
 2024-07-08 20:18:40 +10:00
Kusal Kithul-Godage 7f57e895a1 Merge pull request #967 from apache/WW-5428-allowlist-hibernate 
WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set
 2024-07-08 20:15:38 +10:00
Kusal Kithul-Godage 81b4943176 WW-5439 Move Dev Mode security configuration 2024-07-08 20:01:53 +10:00
Kusal Kithul-Godage 05680d7827 WW-5428 Amend log warning for missing allowlist entry 2024-07-08 19:57:36 +10:00
Kusal Kithul-Godage 8555dc266e WW-5428 Add log warning for allowlist disabled 2024-07-08 19:52:22 +10:00
Kusal Kithul-Godage c6f394a0e8 WW-5428 Add log warning for Hibernate entities 2024-07-08 19:44:05 +10:00
Kusal Kithul-Godage c965812ffe WW-5428 Add unit test coverage for Hibernate proxy resolution 2024-07-08 16:58:07 +10:00
Kusal Kithul-Godage abf03fdccc WW-5428 Clean up SecurityMemberAccessProxyTest 2024-07-08 16:58:07 +10:00
Kusal Kithul-Godage 2f814186c8 WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set 2024-07-08 16:58:07 +10:00
dependabot[bot] 7762d7fba2 Bump actions/upload-artifact from 4.3.3 to 4.3.4 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-08 01:40:34 +00:00
Lukasz Lenart 82b364d521 Merge pull request #977 from stefansielaff/fix-behavior-of-envsvaluesubstitutor 
WW-5437 Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method
 2024-07-05 06:52:12 +02:00
stefansielaff 98f2e68e0b "Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method" 2024-07-02 13:24:57 +02:00
dependabot[bot] 40ab7a776a Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.2.5 to 3.3.0 
Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.2.5 to 3.3.0.
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.2.5...surefire-3.3.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-01 01:20:28 +00:00
Lukasz Lenart 8b22f7170f Merge pull request #966 from apache/dependabot/maven/org.codehaus.mojo-exec-maven-plugin-3.3.0 
Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0
 2024-06-24 07:46:26 +02:00
Lukasz Lenart 688413a359 Merge pull request #965 from apache/dependabot/maven/org.apache.maven.plugins-maven-enforcer-plugin-3.5.0 
Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
 2024-06-24 07:46:02 +02:00
Lukasz Lenart 53ed5f6dfa Merge pull request #960 from apache/dependabot/maven/org.apache.felix-org.apache.felix.main-7.0.5 
Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5
 2024-06-24 07:45:09 +02:00
Lukasz Lenart 100ef07a44 Merge pull request #958 from apache/dependabot/maven/commons-validator-commons-validator-1.9.0 
Bump commons-validator:commons-validator from 1.8.0 to 1.9.0
 2024-06-24 07:42:04 +02:00
Lukasz Lenart 4267bf0647 Merge pull request #971 from apache/feature/WW-5431-deprecated 
WW-5431 Marks unused constants as deprecated
 2024-06-24 07:40:13 +02:00
Kusal Kithul-Godage 898a8d9ef9 Merge pull request #969 from apache/WW-5429-param-anno-log 
WW-5429 Log parameter annotation issues at ERROR level when in DevMode
 2024-06-21 19:47:23 +10:00
Lukasz Lenart 75ebbf4367 WW-5431 Marks unused constants as deprecated 
To be removed in Struts 7
 2024-06-21 08:24:54 +02:00
Lukasz Lenart a8954508c6 Merge pull request #968 from apache/fix/WW-5310-fragment 
WW-5310 Fixes broken support for Fragments in <s:url/> tag
 2024-06-21 07:28:17 +02:00
Kusal Kithul-Godage ba46c18f07 WW-5429 Make DebugUtils final and remove @author JavaDoc tag 2024-06-21 11:04:10 +10:00
Kusal Kithul-Godage b96cf2c072 WW-5429 Log parameter annotation issues at ERROR level when in DevMode 2024-06-18 19:36:51 +10:00
Lukasz Lenart 13916c8b84 WW-5310 Fixes broken support for Fragments in <s:url/> tag 2024-06-18 09:39:17 +02:00
dependabot[bot] a99162a1a4 Bump org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.3.0 
Bumps [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.2.0...3.3.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-17 01:28:53 +00:00
dependabot[bot] b07268d5bd Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0 
Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.4.1 to 3.5.0.
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.4.1...enforcer-3.5.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-17 01:28:48 +00:00
Lukasz Lenart 444e4d4c07 Merge pull request #957 from apache/fix/WW-5250-todo 
WW-5250 Addresses TODO in test and stops using Mock Objects
 2024-06-10 07:03:13 +02:00
Lukasz Lenart cf34f0dbc0 Merge pull request #956 from apache/feature/WW-5400-refactor 
WW-5400 Simplifies how CspSettings is created
 2024-06-10 07:02:49 +02:00
Lukasz Lenart cabc076e48 Merge pull request #962 from apache/dependabot/maven/org.owasp-dependency-check-maven-9.2.0 
Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0
 2024-06-10 07:02:13 +02:00
Lukasz Lenart de2a8d9902 Merge pull request #961 from apache/dependabot/maven/org.apache.commons-commons-compress-1.26.2 
Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2
 2024-06-10 07:02:03 +02:00
dependabot[bot] 9133d24f69 Bump org.owasp:dependency-check-maven from 8.4.2 to 9.2.0 
Bumps [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) from 8.4.2 to 9.2.0.
- [Release notes](https://github.com/jeremylong/DependencyCheck/releases)
- [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jeremylong/DependencyCheck/compare/v8.4.2...v9.2.0)

---
updated-dependencies:
- dependency-name: org.owasp:dependency-check-maven
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-10 01:57:52 +00:00
dependabot[bot] 86b14c7062 Bump org.apache.commons:commons-compress from 1.26.0 to 1.26.2 
Bumps org.apache.commons:commons-compress from 1.26.0 to 1.26.2.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-10 01:57:34 +00:00
dependabot[bot] 54bf309f88 Bump org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5 
Bumps org.apache.felix:org.apache.felix.main from 6.0.3 to 7.0.5.

---
updated-dependencies:
- dependency-name: org.apache.felix:org.apache.felix.main
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-10 01:57:32 +00:00
dependabot[bot] 63fcf0f14f Bump commons-validator:commons-validator from 1.8.0 to 1.9.0 
Bumps commons-validator:commons-validator from 1.8.0 to 1.9.0.

---
updated-dependencies:
- dependency-name: commons-validator:commons-validator
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-10 01:57:26 +00:00
Lukasz Lenart 03db4f1ab0 WW-5250 Addresses TODO in test and stops using Mock Objects 2024-06-07 08:33:08 +02:00
Lukasz Lenart 4a05653a55 Removes duplication 
Co-authored-by: Kusal Kithul-Godage <git@kusal.io>
 2024-06-06 06:32:30 +02:00
Lukasz Lenart 3a6ad5a557 WW-5400 Simplifies how CspSettings is created 2024-06-05 07:39:59 +02:00
Lukasz Lenart dcaff0bf10 Merge pull request #948 from apache/feature/WW-5412-master 
[WW-5412] Upgrades struts-master to ver 15
 2024-06-05 07:06:01 +02:00