d245dc5513
WW-5355 Introduce new cache type selection methods and deprecate problematic setter injection
2023-10-15 23:35:52 +11:00
67da669f05
Merge pull request #765 from apache/WW-5354-block-params
...
WW-5354 Ensure ActionSupport fields are not parameter injectable
2023-10-13 11:40:57 +11:00
f2834d2529
Merge pull request #764 from apache/gh-actions-sonar-21
...
Add JDK 21 build
2023-10-13 11:40:16 +11:00
0432205a68
WW-5354 Ensure ActionSupport fields are not parameter injectable
2023-10-12 21:31:16 +11:00
00db84468d
Convert test class to JUnit4
2023-10-12 03:11:59 +11:00
9c12bb86b5
Fix JDK 21 build
2023-10-12 03:11:59 +11:00
6995eaf2f9
WW-5349 Remove corresponding unit tests
2023-10-09 15:52:58 +11:00
a75a873646
WW-5340 Repackage OgnlGuard
2023-09-27 21:59:58 +10:00
f69364bf63
WW-5340 Rename DefaultOgnlGuard to StrutsOgnlGuard
2023-09-26 19:16:40 +10:00
a4a0d70aa9
WW-5340 Refactor OgnlGuard to do the parsing
2023-09-26 19:11:00 +10:00
4ff700e9a8
WW-5340 Add unit tests
2023-09-26 19:11:00 +10:00
25585617f1
WW-5340 Fix tests
2023-09-26 19:10:57 +10:00
19d26b29a2
Merge pull request #746 from apache/WW-5340-ognlutil-refactor
...
WW-5340 Preliminary refactor of OgnlUtil
2023-09-26 11:06:16 +02:00
fde2b70fab
Merge pull request #745 from apache/WW-5339-cleanup
...
WW-5339 Misc clean up in CompoundRootAccessor and OgnlValueStackTest
2023-09-26 10:15:26 +02:00
13f0591ca1
WW-5340 Remove redundant check on #setValue
2023-08-31 17:22:48 +10:00
ff79c1b041
WW-5342 Implement default off option
2023-08-30 23:06:22 +10:00
7bd31cf315
WW-5339 Clean up OgnlValueStackTest
2023-08-30 18:11:05 +10:00
7c1c674a02
WW-5341 Add unit test for excluded pattern validation
2023-08-30 12:35:48 +10:00
a352132f00
WW-5341 Clean up OgnlUtilTest
2023-08-30 12:35:48 +10:00
1bbcc17c74
WW-5341 Split package exclusion check
2023-08-30 12:35:48 +10:00
c57015749d
WW-5341 Further refactor of OgnlUtil and SecurityMemberAccess to store excluded classes as Strings
2023-08-30 12:35:48 +10:00
215541146d
WW-5336 Correct assertions and add test case
2023-08-22 16:35:29 +10:00
3b515b1a78
WW-5336 Fix visibility warnings
2023-08-22 16:34:29 +10:00
0f068d37ae
WW-5336 Reduce cognitive complexity #makeSelectList
2023-08-22 11:57:30 +10:00
12cd92cb62
WW-5336 Clean up StrutsUtil
2023-08-22 11:57:30 +10:00
e75f8d82b5
Merge pull request #736 from apache/WW-5337-exclusion-performance
...
WW-5337 Make SecurityMemberAccess exclusion checking more performant
2023-08-22 11:28:36 +10:00
270ec4ad71
WW-5337 Fix #testPackageNameExclusionAsCommaDelimited
2023-08-21 23:59:00 +10:00
a228b14a48
WW-5337 Drop superinterface/superclass banning test
2023-08-21 23:58:42 +10:00
f31ba637c8
Merge pull request #727 from apache/fix/WW-5331-proper-get
...
[WW-5331] Uses proper signature of get()
2023-08-21 15:39:16 +02:00
710ec2edb9
WW-5331 Adds tests covering ApplicationMap
2023-08-17 13:22:06 +02:00
e8287ddeef
WW-5331 Adds missing header with licence
2023-08-17 12:53:55 +02:00
e1a80789f1
WW-5331 Covers new logic with tests
2023-08-17 12:51:20 +02:00
2e0764f9da
Merge pull request #729 from apache/fix/WW-5327-removes-duplicate
...
[WW-5327] Removes duplicated exclusion
2023-08-17 12:41:29 +03:00
5aa1d076b2
Increases wait time to avoid failing test
2023-08-17 10:52:01 +02:00
956a956efb
WW-5327 Removes duplicated exclusion
...
Refs #715
2023-08-17 10:47:29 +02:00
9780e70648
WW-5332 Add additional test cases
2023-08-17 13:48:22 +10:00
ec4dfa3e96
WW-5332 Add validation for package name parsing
2023-08-17 13:32:00 +10:00
ce4015739a
Extends exclusion list
2023-07-31 10:39:02 +02:00
bb1a34daae
WW-5327 Stops using JavaBeans notation for setters
2023-07-30 08:25:33 +02:00
7a92cdcbec
Merge pull request #692 from apache/WW-5310-fragment
...
[WW-5310] Supports fragment in URL
2023-06-28 08:55:46 +02:00
4a85b6c4f4
WW-5310 Deprecates the old API in favour of new one
2023-06-27 20:18:38 +02:00
13013e7565
Merge pull request #691 from apache/WW-5261-tag-utils
...
[WW-5261] Avoids creating ValueStack if no ActionContext is available
2023-06-19 09:27:17 +02:00
5a67d58b75
add some improvements
2023-06-04 14:22:49 +04:30
93304a3ee5
WW-5261 Avoids creating ValueStack if no ActionContext is available
2023-05-29 15:55:22 +02:00
97137bd0f9
WW-5310 Supports fragment in URL
2023-05-29 15:52:38 +02:00
269a102749
Update:
...
- Add a few additional tests to SecurityMemberAccessTest.
- Rename some existing tests involving non-static methods to more
accurately reflect that.
- Add one minor optimization to SecurityMemberAccess.
2023-05-28 19:43:47 -04:00
6d0a4bb0c6
Merge pull request #689 from apache/WW-5310-equal-sign
...
[WW-5310] Properly parses param value with equal sign
2023-05-28 09:12:56 +02:00
c92f542180
Merge pull request #688 from JCgH4164838Gh792C124B5/localS2_62_ExecWaitCleanup
...
[WW-5312] Attempt to fix ExecuteAndWaitInterceptor inconsistent processing
2023-05-28 09:07:46 +02:00
b97339e31e
WW-5310 Properly parses param value with equal sign
2023-05-24 07:06:15 +02:00
dd01a47ddb
Update:
...
- Improve ExecuteAndWaitInterceptor state behaviour, added debug and trace
logging.
- Ensure StrutsBackgroundProcess thread done state always set on
completion.
- Fix SessionMap processing issue caused by divergence of method
signatures, which can result in the ancestor methods getting called
(bypassing actual session processing).
- Update SessionMapTest to correspond to changes, add tests to try and
detect some (put/remove) method signature behaviour changes.
2023-05-20 18:05:04 -04:00
Kusal Kithul-Godage