Glen, If you download the latest source for 2.3.16.3, (or somehow find it in the git ....) you can see its:
<!-- Basic stack --> <interceptor-stack name="basicStack"> <interceptor-ref name="exception"/> <interceptor-ref name="servletConfig"/> <interceptor-ref name="prepare"/> <interceptor-ref name="checkbox"/> <interceptor-ref name="multiselect"/> <interceptor-ref name="actionMappingParams"/> <interceptor-ref name="params"> <param name="excludeParams">^action:.*,^method:.*</param> </interceptor-ref> <interceptor-ref name="conversionError"/> <interceptor-ref name="deprecation"/> </interceptor-stack> I will download and do another test. Greg On 16 June 2014 04:22, Glen Mazza <glen.ma...@gmail.com> wrote: > Hi Greg (and anyone else), I updated 5.0.4 per your comments last week, > note the struts.xml (viewable at the bottom here) was updated using the > full params string in the Struts' default struts.xml ( > http://struts.apache.org/release/2.3.x/docs/struts-defaultxml.html), as > you wrote "As we have our own default struts xml, its best to copy the > settings from the default xml supplied with the latest version of struts. > The parameter interceptor was the reason for the security upgrade." > > The app seems to run fine and the validators are working again. Is there > anything visually you see wrong below? If not, I'll go ahead and make new > ZIPs and hold another vote. > > (Also the struts.xml change will probably need to go into the > 5.1-SNAPSHOT. We may be due for a full struts.xml overhaul, but I'd like > to keep that in the 5.1.0-SNAPSHOT branch if I can.) > > Regards, > Glen > > > On 06/15/2014 11:13 PM, gma...@apache.org wrote: > >> Author: gmazza >> Date: Mon Jun 16 03:13:27 2014 >> New Revision: 1602793 >> >> URL: http://svn.apache.org/r1602793 >> Log: >> Updated validators, struts.xml per Greg's last comments. >> >> Modified: >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/ >> CreateWeblog-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/ >> Profile-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> BookmarkAdd-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> BookmarkEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> CategoryAdd-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> CategoryEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> EntryAdd-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> EntryEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> FolderAdd-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> FolderEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> MediaFileEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> TemplateEdit-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> WeblogConfig-validation.xml >> roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/struts.xml >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/ >> CreateWeblog-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/core/CreateWeblog-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/CreateWeblog-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/CreateWeblog-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.handle"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/ >> Profile-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/core/Profile-validation.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/Profile-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/core/Profile-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.screenName"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> BookmarkAdd-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/BookmarkAdd-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/BookmarkAdd-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/BookmarkAdd-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> BookmarkEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/BookmarkEdit-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/BookmarkEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/BookmarkEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> CategoryAdd-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/CategoryAdd-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/CategoryAdd-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/CategoryAdd-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> CategoryEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/CategoryEdit-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/CategoryEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/CategoryEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> EntryAdd-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/EntryAdd-validation.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/EntryAdd-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/EntryAdd-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.title"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> EntryEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/EntryEdit-validation.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/EntryEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/EntryEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.title"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> FolderAdd-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/FolderAdd-validation.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/FolderAdd-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/FolderAdd-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> FolderEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/FolderEdit-validation.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/FolderEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/FolderEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> MediaFileEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/MediaFileEdit-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/MediaFileEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/MediaFileEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> TemplateEdit-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/TemplateEdit-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/TemplateEdit-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/TemplateEdit-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/ >> WeblogConfig-validation.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/org/apache/roller/ >> weblogger/ui/struts2/editor/WeblogConfig-validation.xml? >> rev=1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/WeblogConfig-validation.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/org/apache/roller/weblogger/ui/struts2/editor/WeblogConfig-validation.xml >> Mon Jun 16 03:13:27 2014 >> @@ -1,5 +1,6 @@ >> -<!DOCTYPE validators PUBLIC "-//OpenSymphony Group//XWork Validator >> 1.0.2//EN" >> - "http://www.opensymphony.com/xwork/xwork-validator-1.0.2.dtd"> >> +<!DOCTYPE validators PUBLIC >> + "-//Apache Struts//XWork Validator 1.0.3//EN" >> + "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd"> >> <validators> >> <field name="bean.name"> >> >> Modified: roller/branches/roller_5.0/weblogger-web/src/main/ >> resources/struts.xml >> URL: http://svn.apache.org/viewvc/roller/branches/roller_5.0/ >> weblogger-web/src/main/resources/struts.xml?rev= >> 1602793&r1=1602792&r2=1602793&view=diff >> ============================================================ >> ================== >> --- roller/branches/roller_5.0/weblogger-web/src/main/resources/struts.xml >> (original) >> +++ roller/branches/roller_5.0/weblogger-web/src/main/resources/struts.xml >> Mon Jun 16 03:13:27 2014 >> @@ -40,7 +40,7 @@ >> <interceptor-ref name="checkbox"/> >> <interceptor-ref name="staticParams"/> >> <interceptor-ref name="params"> >> - <param name="excludeParams">dojo\..*</param> >> + <param name="excludeParams">^class\.. >> *,^dojo\..*,^struts\..*,^session\..*,^request\..*,^ >> application\..*,^servlet(Request|Response)\..*,^ >> parameters\..*,^action:.*,^method:.*</param> >> </interceptor-ref> >> <interceptor-ref name="conversionError"/> >> >> >> >