3607 Commits

Author	SHA1	Message	Date
Lukasz Lenart	d6e30b45da	[maven-release-plugin] prepare release STRUTS_6_6_0	2024-07-20 08:28:35 +02:00
Kusal Kithul-Godage	cec46792cf	Merge branch 'master' into WW-5440-convention	2024-07-15 13:18:00 +10:00
Kusal Kithul-Godage	085471b408	Merge pull request #988 from apache/kusal-experimental ... WW-5442 Enforce allowlist for OgnlReflectionProvider	2024-07-14 21:44:38 +10:00
Kusal Kithul-Godage	b7b5bff13a	WW-5442 Enforce allowlist for OgnlReflectionProvider	2024-07-14 00:47:38 +10:00
Kusal Kithul-Godage	cb62cb4e9a	WW-5440 Fix OGNL allowlist compat with Convention plugin	2024-07-14 00:34:06 +10:00
Kusal Kithul-Godage	abfb2f4568	WW-5428 Stop further excessive logging in DevMode	2024-07-13 23:41:33 +10:00
Kusal Kithul-Godage	f9953938f7	WW-5440 Add missing annotations	2024-07-13 21:57:26 +10:00
Kusal Kithul-Godage	56c1291d2f	WW-5440 Deprecate AnnotationParameterFilterInterceptor	2024-07-13 21:22:21 +10:00
Lukasz Lenart	54e387dc6f	[maven-release-plugin] prepare for next development iteration	2024-07-12 07:27:19 +02:00
Lukasz Lenart	dbfb59cb7c	[maven-release-plugin] prepare release STRUTS_6_5_0	2024-07-12 07:27:08 +02:00
Kusal Kithul-Godage	9fe1a4a031	WW-5428 Stop excessive logging in DevMode	2024-07-09 05:01:02 +10:00
Kusal Kithul-Godage	81b4943176	WW-5439 Move Dev Mode security configuration	2024-07-08 20:01:53 +10:00
Kusal Kithul-Godage	05680d7827	WW-5428 Amend log warning for missing allowlist entry	2024-07-08 19:57:36 +10:00
Kusal Kithul-Godage	8555dc266e	WW-5428 Add log warning for allowlist disabled	2024-07-08 19:52:22 +10:00
Kusal Kithul-Godage	c6f394a0e8	WW-5428 Add log warning for Hibernate entities	2024-07-08 19:44:05 +10:00
Kusal Kithul-Godage	c965812ffe	WW-5428 Add unit test coverage for Hibernate proxy resolution	2024-07-08 16:58:07 +10:00
Kusal Kithul-Godage	2f814186c8	WW-5428 Allowlist capability should resolve Hibernate proxies when disableProxyObjects is not set	2024-07-08 16:58:07 +10:00
stefansielaff	98f2e68e0b	"Swap order of sysStrSubstitutor and envStrSubstitutor in substitute method"	2024-07-02 13:24:57 +02:00
Lukasz Lenart	4267bf0647	Merge pull request #971 from apache/feature/WW-5431-deprecated ... WW-5431 Marks unused constants as deprecated	2024-06-24 07:40:13 +02:00
Kusal Kithul-Godage	898a8d9ef9	Merge pull request #969 from apache/WW-5429-param-anno-log ... WW-5429 Log parameter annotation issues at ERROR level when in DevMode	2024-06-21 19:47:23 +10:00
Lukasz Lenart	75ebbf4367	WW-5431 Marks unused constants as deprecated ... To be removed in Struts 7	2024-06-21 08:24:54 +02:00
Kusal Kithul-Godage	ba46c18f07	WW-5429 Make DebugUtils final and remove @author JavaDoc tag	2024-06-21 11:04:10 +10:00
Kusal Kithul-Godage	b96cf2c072	WW-5429 Log parameter annotation issues at ERROR level when in DevMode	2024-06-18 19:36:51 +10:00
Lukasz Lenart	13916c8b84	WW-5310 Fixes broken support for Fragments in <s:url/> tag	2024-06-18 09:39:17 +02:00
Lukasz Lenart	444e4d4c07	Merge pull request #957 from apache/fix/WW-5250-todo ... WW-5250 Addresses TODO in test and stops using Mock Objects	2024-06-10 07:03:13 +02:00
Lukasz Lenart	03db4f1ab0	WW-5250 Addresses TODO in test and stops using Mock Objects	2024-06-07 08:33:08 +02:00
Lukasz Lenart	4a05653a55	Removes duplication ... Co-authored-by: Kusal Kithul-Godage <git@kusal.io>	2024-06-06 06:32:30 +02:00
Lukasz Lenart	3a6ad5a557	WW-5400 Simplifies how CspSettings is created	2024-06-05 07:39:59 +02:00
Lukasz Lenart	4a8ff99b1c	WW-5424 Fixes ClassCastException when using short var name in s:set tag	2024-06-02 13:53:37 +02:00
Lukasz Lenart	40ccc74b8a	Merge pull request #933 from apache/fix/WW-5415-constructor ... WW-5415 Fixes accessing public constructors via expression	2024-05-14 19:56:27 +02:00
Lukasz Lenart	d147543dcd	Merge pull request #932 from apache/feature/WW-5414-after ... WW-5414 Always call afterInvocation even in case of exception	2024-05-14 19:55:30 +02:00
Lukasz Lenart	0a57cac6d6	WW-5422 Adds dedicate unit test to cover DefaultLocaleProvider	2024-05-13 07:43:36 +02:00
Kusal Kithul-Godage	7c523ac33e	WW-5415 Constructor members should be exempted as static members	2024-05-13 12:37:04 +10:00
Lukasz Lenart	b36e88ff4b	WW-5415 Fixes accessing public constructors via expression	2024-05-12 09:47:38 +02:00
Lukasz Lenart	4dfbe09343	WW-5414 Always call afterInvocation even in case of exception	2024-05-11 10:22:27 +02:00
Lukasz Lenart	649760d8b0	Merge pull request #913 from eschulma/master ... WW-5400 Extend default configuration options for the CSP interceptor.	2024-05-11 06:36:33 +02:00
Kusal Kithul-Godage	3c21e82290	Merge pull request #916 from apache/WW-5418-struts-sec ... WW-5418 Forbid Enums and Jasper classes	2024-04-20 20:01:06 +10:00
Kusal Kithul-Godage	f5cfb88f1f	Merge pull request #915 from atlassian-forks/issue/WW-5417-bump-ongl-version-to-fix-security-issue ... WW-5417 bump ognl version to fix security issue	2024-04-19 17:47:40 +10:00
Kusal Kithul-Godage	63267a8e06	Merge pull request #914 from atlassian-forks/issue/WW-5409-introduce-final-attribute-to-package-element ... WW-5409 introduce final attribute to package element which make them unextendable	2024-04-19 17:47:02 +10:00
Kusal Kithul-Godage	ad49ea866a	WW-5406 Fix injection order issue for excluded patterns	2024-04-18 22:28:30 +10:00
Kusal Kithul-Godage	7e9f6e84f2	WW-5418 Exclude Tomcat Jasper classes	2024-04-18 11:14:10 +10:00
Kusal Kithul-Godage	100f5052d4	WW-5418 Forbid enums	2024-04-18 11:13:56 +10:00
Jeffery Xie	0a720971c7	WW-5417 bump ognl version to fix security issue	2024-04-18 11:02:16 +10:00
Erica S. Kane	6ac8b04ad2	WW-5400 Added @since Struts 6.5.0 to new properties as requested	2024-04-12 13:40:53 -04:00
Kusal Kithul-Godage	1562e66a89	Merge pull request #912 from atlassian-forks/issue/WW-5408-add-option-to-not-fallback-to-empty-namespace-when-unresolved ... WW-5408 add option to not fallback to empty namespace when unresolved	2024-04-12 17:58:06 +10:00
Jeffery Xie	85783a0cc7	WW-5409 rename 6.5.0.dtd to 6.5.dtd to follow the naming pattern	2024-04-12 16:04:34 +10:00
Erica S. Kane	0151bdeb9c	WW-5400 Better toString formatting	2024-04-11 16:52:44 -04:00
Kusal Kithul-Godage	0aa2f269f2	Merge pull request #911 from atlassian-forks/issue/WW-5407-extend-SecurityMemberAccess-proxy-detection-to-proxies ... WW-5407 Extend SecurityMemberAccess proxy detection to other proxies	2024-04-11 19:16:36 +10:00
Jeffery Xie	4088f2ee2b	WW-5409 update new dtd from 6.4.0 to 6.5.0	2024-04-11 15:07:25 +10:00
Jeffery Xie	1d51d00ecb	WW-5408 add struts.actionConfig.fallbackToEmptyNamespace as true in default.properties	2024-04-11 14:57:57 +10:00