Commit Graph

  • d0d10d9389 WW-5343 Fix MemberAccess access blocked tests Kusal Kithul-Godage 2023-11-17 15:42:20 +11:00
  • a402e5c80a WW-5343 Revert and fix serializability Kusal Kithul-Godage 2023-11-17 15:28:14 +11:00
  • f87d7d7340 WW-5343 Add missing license Kusal Kithul-Godage 2023-11-17 11:38:50 +11:00
  • ceff6cde03 WW-5343 Remove unnecessary method Kusal Kithul-Godage 2023-11-16 23:06:13 +11:00
  • 63b0da3a7f Merge pull request #793 from apache/WW-5363-velocity-order-2 Kusal Kithul-Godage 2023-11-15 16:42:44 +11:00
  • 0504e7076c WW-5363 Remove redundant method from VelocityManager Kusal Kithul-Godage 2023-11-15 16:06:24 +11:00
  • 9f45983dac Merge pull request #781 from apache/WW-5350-allowlist-2 Kusal Kithul-Godage 2023-11-15 00:39:26 +11:00
  • f989f370bb Merge pull request #789 from apache/issue/WW-5363-velocity-order Kusal Kithul-Godage 2023-11-15 00:37:02 +11:00
  • 62988f783f WW-5343 Fix unit test compilation errors Kusal Kithul-Godage 2023-11-15 00:30:12 +11:00
  • 8bf47b3679 WW-5343 Fix OgnlUtilTest#testBeanMapExpressions Kusal Kithul-Godage 2023-11-15 00:28:46 +11:00
  • 4490d9d772 WW-5343 Move configuration injection from OgnlUtil to SecurityMemberAccess Kusal Kithul-Godage 2023-11-15 00:25:29 +11:00
  • b518635e2e WW-5343 Update OgnlUtil#createDefaultContext to utilise SecurityMemberAccess bean Kusal Kithul-Godage 2023-11-15 00:24:39 +11:00
  • 7e92a8d7b4 WW-5343 Refactor OgnlValueStackFactory to utilise SecurityMemberAccess bean Kusal Kithul-Godage 2023-11-15 00:23:51 +11:00
  • 90344b3810 WW-5343 Make SecurityMemberAccess a prototype bean Kusal Kithul-Godage 2023-11-15 00:22:36 +11:00
  • 9e556e9ed4 WW-5343 Deprecate unnecessary setter Kusal Kithul-Godage 2023-11-15 00:20:58 +11:00
  • b0b80bac77 WW-5343 Extract deprecated methods as default interface methods Kusal Kithul-Godage 2023-11-15 00:19:47 +11:00
  • 0825329959 WW-5343 Extract ConfigParseUtil Kusal Kithul-Godage 2023-11-15 00:18:48 +11:00
  • 79ffc86b68 WW-5343 Delete unused code and consolidate constructors Kusal Kithul-Godage 2023-08-31 23:56:02 +10:00
  • ea856e0d49 Merge pull request #790 from apache/feature/jenkins-notifications-list Lukasz Lenart 2023-11-13 17:15:10 +01:00
  • 2188d11591 Send Jenkins notifications to the notifications@ list Lukasz Lenart 2023-11-13 16:27:15 +01:00
  • 29d471e2dd WW-5363 Improve code coverage Kusal Kithul-Godage 2023-11-14 02:11:49 +11:00
  • 6c98663f84 WW-5363 Fix super#internalGet Kusal Kithul-Godage 2023-11-14 02:10:16 +11:00
  • cf9e53573e WW-5363 Add test coverage Kusal Kithul-Godage 2023-11-14 01:45:43 +11:00
  • a2b4744c3a WW-5363 Velocity: read chained contexts before ValueStack Kusal Kithul-Godage 2023-11-13 23:58:41 +11:00
  • 30aee93f7d Merge pull request #788 from apache/feature/notifications-list Lukasz Lenart 2023-11-13 07:53:25 +01:00
  • fadfe24c5f Uses the new notifications@ list for all the messages form Github Lukasz Lenart 2023-11-13 07:15:36 +01:00
  • 4a206d83f8 Merge pull request #779 from apache/feature/WW-5333-attribute-map Lukasz Lenart 2023-11-12 21:48:04 +01:00
  • f326ce3277 WW-5333 Refactors AttributeMap Lukasz Lenart 2023-11-04 15:50:59 +01:00
  • b4fbc0f0d6 Merge branch 'master' into WW-5350-allowlist-2 Kusal Kithul-Godage 2023-11-12 20:10:49 +11:00
  • 9d6fe74935 Merge pull request #780 from apache/WW-5350-allowlist Kusal Kithul-Godage 2023-11-12 19:56:13 +11:00
  • e3241388dc WW-5350 Fix mismatched logging Kusal Kithul-Godage 2023-11-12 19:49:40 +11:00
  • f511034acd Merge pull request #784 from apache/dependabot/maven/net.sf.jasperreports-jasperreports-6.20.6 Kusal Kithul-Godage 2023-11-06 13:50:19 +11:00
  • d8bc96d17e Merge pull request #783 from apache/dependabot/maven/slf4j.version-2.0.9 Kusal Kithul-Godage 2023-11-06 13:49:52 +11:00
  • 601fb0ff5c Bump net.sf.jasperreports:jasperreports from 6.20.5 to 6.20.6 dependabot[bot] 2023-11-06 01:22:54 +00:00
  • 72d617012b Bump slf4j.version from 2.0.7 to 2.0.9 dependabot[bot] 2023-11-06 01:22:44 +00:00
  • bef9769170 WW-5350 Implement OGNL Allowlist capability Kusal Kithul-Godage 2023-11-05 23:05:35 +11:00
  • 9cbe10f06b WW-5350 See target to null in special case Kusal Kithul-Godage 2023-11-05 22:02:40 +11:00
  • 0928a6ae68 WW-5350 Make property matching code more succinct Kusal Kithul-Godage 2023-11-05 21:41:55 +11:00
  • c85d7ebf5d WW-5350 Fix argument validation Kusal Kithul-Godage 2023-11-05 20:35:30 +11:00
  • 39787947f1 WW-5350 Fix static member test Kusal Kithul-Godage 2023-11-05 19:49:25 +11:00
  • 82647959b2 WW-5350 Refactor SecurityMemberAccess Kusal Kithul-Godage 2023-11-03 18:10:57 +11:00
  • 56fc1ddc5b Merge pull request #777 from apache/dependabot/maven/org.jacoco-jacoco-maven-plugin-0.8.11 Lukasz Lenart 2023-10-30 07:03:19 +01:00
  • 48b0c1173d Merge pull request #776 from apache/dependabot/maven/junit-junit-4.13.2 Lukasz Lenart 2023-10-30 07:03:11 +01:00
  • 574da8111f Merge pull request #775 from apache/dependabot/github_actions/ossf/scorecard-action-2.3.1 Lukasz Lenart 2023-10-30 07:02:31 +01:00
  • 4531306664 Bump org.jacoco:jacoco-maven-plugin from 0.8.8 to 0.8.11 dependabot[bot] 2023-10-30 01:36:35 +00:00
  • f13284832d Bump junit:junit from 4.13.1 to 4.13.2 dependabot[bot] 2023-10-30 01:36:27 +00:00
  • 3ef0aa7092 Bump ossf/scorecard-action from 2.3.0 to 2.3.1 dependabot[bot] 2023-10-30 01:33:58 +00:00
  • bd388956cd Merge pull request #774 from apache/WW-5358-excl-list Kusal Kithul-Godage 2023-10-25 22:23:47 +11:00
  • b15b83dd07 Merge pull request #773 from mygreen/improve-urldecoder-peformance Lukasz Lenart 2023-10-25 12:12:44 +02:00
  • c2aec9c076 WW-5358 Expand exclusion lists Kusal Kithul-Godage 2023-10-25 15:44:07 +11:00
  • faa98d7af1 Update core/src/main/java/org/apache/struts2/url/StrutsUrlDecoder.java mygreen 2023-10-24 19:58:19 +09:00
  • afe31cc01e Update core/src/main/java/org/apache/struts2/url/StrutsUrlDecoder.java mygreen 2023-10-24 19:58:12 +09:00
  • 5bcf9e7854 Improved charset retrieval to get only once. tatsu-no-otoshigo 2023-10-23 22:34:05 +09:00
  • fc5d1cabe7 Merge pull request #771 from apache/dependabot/maven/org.owasp-dependency-check-maven-8.4.2 Lukasz Lenart 2023-10-23 06:23:44 +02:00
  • e8562c78d4 Bump org.owasp:dependency-check-maven from 7.2.0 to 8.4.2 dependabot[bot] 2023-10-23 01:17:13 +00:00
  • cae627f35d Merge pull request #766 from apache/WW-5355-cache-lru Kusal Kithul-Godage 2023-10-19 00:42:31 +11:00
  • 7afc77266b WW-5355 Bootstrap using basic cache Kusal Kithul-Godage 2023-10-17 14:16:27 +11:00
  • 7cded18c09 WW-5355 Rename cache types Kusal Kithul-Godage 2023-10-17 14:16:14 +11:00
  • 84c1b1d0eb Merge pull request #768 from apache/dependabot/maven/org.codehaus.mojo-versions-maven-plugin-2.16.1 Lukasz Lenart 2023-10-16 06:29:45 +02:00
  • 9dbea66f9c WW-5355 Amend Caffeine cache implementation Kusal Kithul-Godage 2023-10-16 13:06:09 +11:00
  • fb710f9ca8 Bump org.codehaus.mojo:versions-maven-plugin from 2.7 to 2.16.1 dependabot[bot] 2023-10-16 01:13:04 +00:00
  • f314b455f7 WW-5355 Add since tags to StrutsConstants JavaDoc Kusal Kithul-Godage 2023-10-16 00:45:36 +11:00
  • 3d5beae367 WW-5355 Declare bootstrap constants as final field instead Kusal Kithul-Godage 2023-10-16 00:39:12 +11:00
  • 9be23d7a0c WW-5355 Extract constants into static final fields Kusal Kithul-Godage 2023-10-16 00:20:17 +11:00
  • 793d383711 WW-5355 Delegate deprecated constructor Kusal Kithul-Godage 2023-10-16 00:17:43 +11:00
  • 28cc6459bf WW-5355 Address code smells Kusal Kithul-Godage 2023-10-16 00:11:51 +11:00
  • 43fb80e177 Merge pull request #767 from apache/fix-conflict-deps Kusal Kithul-Godage 2023-10-15 23:58:50 +11:00
  • 7463e1de13 WW-5355 Fix interface and unit test bug Kusal Kithul-Godage 2023-10-15 23:57:04 +11:00
  • 4700dca188 WW-5355 Downgrade Caffeine version Kusal Kithul-Godage 2023-10-15 23:42:43 +11:00
  • a750917fb4 Upgrade ASM and exclude conflicting artifact Kusal Kithul-Godage 2023-10-15 23:37:36 +11:00
  • 403c3c4a10 Unify HtmlUnit versions Kusal Kithul-Godage 2023-10-15 23:37:13 +11:00
  • 39f81575f9 Upgrade Jackson and remove unnecessary transitive override Kusal Kithul-Godage 2023-10-15 13:48:23 +11:00
  • d245dc5513 WW-5355 Introduce new cache type selection methods and deprecate problematic setter injection Kusal Kithul-Godage 2023-10-15 23:28:58 +11:00
  • bfb4df13ee WW-5355 Unify bootstrap constant declaration Kusal Kithul-Godage 2023-10-15 23:28:04 +11:00
  • 9c932f2033 WW-5355 Introduce new Struts constants and their defaults Kusal Kithul-Godage 2023-10-15 23:26:43 +11:00
  • 6ff7e15bfc WW-5355 Update JavaDoc for basic and LRU cache Kusal Kithul-Godage 2023-10-15 19:47:58 +11:00
  • 1573207ee7 WW-5355 Fix eviction limit in LRU cache not being enforced Kusal Kithul-Godage 2023-10-15 19:47:35 +11:00
  • 9527da5d36 WW-5355 Initial Caffeine cache implementation Kusal Kithul-Godage 2023-10-15 14:51:15 +11:00
  • 5011a79777 WW-5355 Prevent AtomicInteger being initialised to zero Kusal Kithul-Godage 2023-10-15 13:49:24 +11:00
  • 74d2fdcc6c WW-5355 Use LRU cache by default Kusal Kithul-Godage 2023-10-13 21:56:25 +11:00
  • 67da669f05 Merge pull request #765 from apache/WW-5354-block-params Kusal Kithul-Godage 2023-10-13 11:40:57 +11:00
  • f2834d2529 Merge pull request #764 from apache/gh-actions-sonar-21 Kusal Kithul-Godage 2023-10-13 11:40:16 +11:00
  • 913f6bf3a1 Merge pull request #763 from apache/WW-5349-astvarref Kusal Kithul-Godage 2023-10-13 11:39:54 +11:00
  • 0432205a68 WW-5354 Ensure ActionSupport fields are not parameter injectable Kusal Kithul-Godage 2023-10-12 21:31:16 +11:00
  • b736eb281d Upgrade EasyMock Kusal Kithul-Godage 2023-10-12 03:25:54 +11:00
  • 23feab685c Merge pull request #740 from apache/dependabot/maven/org.jfree-jfreechart-1.5.4 Kusal Kithul-Godage 2023-10-12 03:16:54 +11:00
  • 00db84468d Convert test class to JUnit4 Kusal Kithul-Godage 2023-10-12 02:15:58 +11:00
  • 9c12bb86b5 Fix JDK 21 build Kusal Kithul-Godage 2023-10-12 01:56:44 +11:00
  • 62db310b09 Add JDK 21 build Kusal Kithul-Godage 2023-09-18 21:06:42 +10:00
  • a165c02eff Merge pull request #762 from apache/dependabot/github_actions/ossf/scorecard-action-2.3.0 Lukasz Lenart 2023-10-09 10:28:33 +02:00
  • 6995eaf2f9 WW-5349 Remove corresponding unit tests Kusal Kithul-Godage 2023-10-09 15:52:58 +11:00
  • 4155263e63 WW-5349 Remove Struts core dependency on OGNL VarRefs Kusal Kithul-Godage 2023-10-09 15:48:07 +11:00
  • 8a95a3f486 Bump ossf/scorecard-action from 2.2.0 to 2.3.0 dependabot[bot] 2023-10-09 01:45:02 +00:00
  • fc03a2b694 Merge pull request #760 from apache/WW-5340-subclassable Kusal Kithul-Godage 2023-10-06 18:58:47 +11:00
  • f4029f8fd0 WW-5340 Sanitize field names before logging Kusal Kithul-Godage 2023-10-06 15:47:47 +11:00
  • 46c29ae338 Merge pull request #759 from apache/feature/WW-5344-undeprecate Lukasz Lenart 2023-10-06 06:42:05 +02:00
  • 276ede4c88 WW-5340 Add debug logging for rejected form fields Kusal Kithul-Godage 2023-10-06 04:17:31 +11:00
  • 20eafb6327 WW-5340 Mild refactor StrutsOgnlGuard for easier subclassing Kusal Kithul-Godage 2023-10-06 04:16:57 +11:00
  • 529b611158 WW-5344 Un-deprecates Sitemesh plugin and upgrades Sitmesh to ver 2.5.0 Lukasz Lenart 2023-10-05 09:42:46 +02:00
  • ff9ecbe089 Merge pull request #758 from apache/feature/WW-5338-remove-ognltool Lukasz Lenart 2023-10-05 08:39:53 +02:00