[jira] [Closed] (VELTOOLS-170) Upgrade beanutils to 1.9.3 & supress access to class and Class

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov closed VELTOOLS-170. --- > Upgrade beanutils to 1.9.3 & supress access to class and Class >

[jira] [Closed] (VELTOOLS-171) Remove Struts dependency

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov closed VELTOOLS-171. --- > Remove Struts dependency > > > Key: VELTOOLS-171 >

[jira] [Closed] (VELTOOLS-161) allow session toolbox serialization

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov closed VELTOOLS-161. --- > allow session toolbox serialization > --- > >

[jira] [Closed] (VELTOOLS-172) Remove dependency on Apache Commons Validator

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-172?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov closed VELTOOLS-172. --- > Remove dependency on Apache Commons Validator > -

[jira] [Closed] (VELTOOLS-169) Upgrade commons-collections compile dependency to v3.2.2 or v4.1

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov closed VELTOOLS-169. --- Resolution: Won't Fix Fix Version/s: (was: 3.0) Nothing to fix here in 3.0 becau

[jira] [Updated] (VELOCITY-853) Upgrade dependency to commons-collections4

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELOCITY-853?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov updated VELOCITY-853: Fix Version/s: (was: 2.0) > Upgrade dependency to commons-collections4 >

[jira] [Reopened] (VELTOOLS-169) Upgrade commons-collections compile dependency to v3.2.2 or v4.1

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov reopened VELTOOLS-169: - > Upgrade commons-collections compile dependency to v3.2.2 or v4.1 > --

[jira] [Updated] (VELTOOLS-125) StrutsLinkTool are returning the full url the action. Problem with reverse proxy applications because $link.Action() most be return the context path only.

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov updated VELTOOLS-125: Fix Version/s: (was: 3.0) > StrutsLinkTool are returning the full url the action. Pro

[jira] [Updated] (VELTOOLS-126) XSS Vulnerability when using struts/ErrorsTool.getMsgs

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-126?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov updated VELTOOLS-126: Fix Version/s: (was: 3.0) > XSS Vulnerability when using struts/ErrorsTool.getMsgs >

[jira] [Updated] (VELTOOLS-138) StrutsLinkTool breaks paths containing a query string

2018-06-24 Thread Michael Osipov (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Michael Osipov updated VELTOOLS-138: Fix Version/s: (was: 3.0) > StrutsLinkTool breaks paths containing a query string > -

[jira] [Commented] (VELOCITY-853) Upgrade dependency to commons-collections4

2018-06-24 Thread Peter Janssen (JIRA)
[ https://issues.apache.org/jira/browse/VELOCITY-853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16521491#comment-16521491 ] Peter Janssen commented on VELOCITY-853: Could you point me how to supply a pat

[jira] [Updated] (VELTOOLS-170) Upgrade beanutils to 1.9.3 & supress access to class and Class

2018-06-24 Thread Sergiu Dumitriu (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergiu Dumitriu updated VELTOOLS-170: - Summary: Upgrade beanutils to 1.9.3 & supress access to class and Class (was: Upgrade

[jira] [Reopened] (VELTOOLS-163) Apache Struts Vulnerabilities - Velocity Tool (2.0)

2018-06-24 Thread Sergiu Dumitriu (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergiu Dumitriu reopened VELTOOLS-163: -- > Apache Struts Vulnerabilities - Velocity Tool (2.0) > -

[jira] [Closed] (VELTOOLS-163) Apache Struts Vulnerabilities - Velocity Tool (2.0)

2018-06-24 Thread Sergiu Dumitriu (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-163?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergiu Dumitriu closed VELTOOLS-163. Resolution: Duplicate Fix Version/s: (was: 3.0) > Apache Struts Vulnerabilitie

[jira] [Updated] (VELTOOLS-172) Remove dependency on Apache Commons Validator

2018-06-24 Thread Sergiu Dumitriu (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-172?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergiu Dumitriu updated VELTOOLS-172: - Summary: Remove dependency on Apache Commons Validator (was: Upgrade to supported, sec

[jira] [Updated] (VELTOOLS-171) Remove Struts dependency

2018-06-24 Thread Sergiu Dumitriu (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergiu Dumitriu updated VELTOOLS-171: - Summary: Remove Struts dependency (was: Upgrade to supported, secure version of Struts

Re: [jira] [Resolved] (VELTOOLS-169) Upgrade commons-collections compile dependency to v3.2.2 or v4.1

2018-06-24 Thread Greg Huber
Claude, Thanks for the updates, btw the depreciated TexenTask also uses the ExtendedProperties, I tried to use the o.a.v.util.ExtProperties suggested here, but it does not work for some reason, I switched to org.apache.commons.configuration2.PropertiesConfiguration which does work. its basically