mirror of
https://github.com/apache/struts.git
synced 2026-08-11 09:36:57 +00:00
Arun
b70ecc8e15
* Add path segment validation utility to StaticContentLoader * Remove redundant URL decode in buildPath and reject malformed path segments early * Use shared path segment validation in WebJar URL provider * Document encoding contract on RequestUtils.getServletPath * Add tests for path segment validation in static content loader * Add encoded traversal test for WebJar static content serving * Add encoded traversal tests for WebJar URL provider * Fix missing closing brace in StaticContentLoader causing compile failure * Use per-segment matching in containsMalformedPathSegment to avoid false positives * Remove redundant dot-segment check now handled by containsMalformedPathSegment * Fix indentation on validateStaticContentPath closing brace * Remove unused encoding field and setter from DefaultStaticContentLoader * Replace denylist with path canonicalisation in Validator * Wire canonicalisePath into static content serving * Wire canonicalisePath into WebJar URL provider * Update tests for canonicalise approach and remove unused setEncoding call * Remove setEncoding calls from tests to match updated DefaultStaticContentLoader * Remove setEncoding calls from tests to match updated DefaultStaticContentLoader * Remove redundant encoded-traversal tests per maintainer review — end-to-end 404 already covered
Struts 2 Core
This is a core of the Apache Struts framework and all other modules depend on it. It requires Java 8 at minimum and a Servlet container supporting Java Servlet API 3.1 at least.
Installation
Just drop this plugin into WEB-INF/lib folder or add it as Maven dependency