mirror of https://github.com/apache/struts.git synced 2026-08-06 15:17:00 +00:00

Files

T

History

Lukasz Lenart a1c8af5574 WW-5666 Apply input length limits consistently when reading request bodies (6.x) (#1822 )

* WW-5666 fix(json): apply the input length limit while reading

* WW-5666 fix(core): bound the CSP report body read and make the limit configurable

CspReportAction read the submitted report body with a single readLine() and had
no limit of its own. Read it up to a limit instead, defaulting to 8192
characters and configurable through struts.csp.report.maxSize. A body above the
limit is discarded with a warning rather than processed.

The limit is injected when the action is built, before the interceptor stack
runs, because withServletRequest is invoked by the servletConfig interceptor
ahead of staticParams and params. Values that are not usable as a buffer size
are ignored with a warning.

2026-08-01 10:04:57 +02:00

src

WW-5666 Apply input length limits consistently when reading request bodies (6.x) (#1822 )

2026-08-01 10:04:57 +02:00

pom.xml

Prepare for a new development cycle of Struts 6.11.0 (#1739 )

2026-06-14 07:39:08 +00:00

README.md

WW-4440 Adds basic README.md to all submodules

2022-10-27 12:53:05 +02:00

README.md

Struts 2 JFreeChart plugin

The JSON plugin provides a json result type that serializes actions into JSON. You will find more details in documentation.

Installation

Just drop this plugin JAR into WEB-INF/lib folder or add it as a Maven dependency.