[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-20 Thread James Chaplin (JIRA)


[ 
https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16747696#comment-16747696
 ] 

James Chaplin commented on WW-5004:
---

Hello.

For 2.5.x it seems that the flag _struts.allowStaticMethodAccess_ does produce 
a change, to allow the field access, but as commented above that wasn't 
necessary to access public static fields in 2.5.18.

There's a recent PR for OGNL 3.1.x that might mitigate the issue for 2.5.21, 
but downgrading to OGNL 3.1.18 also worked for me with 2.5.20 (at least 
according to a test page created to simulate the scenario).

> No more calling of a static variable in Struts 2.8.20 available
> ---
>
> Key: WW-5004
> URL: https://issues.apache.org/jira/browse/WW-5004
> Project: Struts 2
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.5.20
> Environment: Java 7.1 and JSP Websites
>Reporter: Deniz Renkligül
>Priority: Critical
>  Labels: build, features, patch, usability
> Fix For: 2.5.21, 2.6
>
>
> After the update from Struts 2.5.18 to 2.5.20 it is not more possible to call 
> a java static variable in JSP like
> {code:java}
> 
> {code}
> Please see for more details the release notes of 2.5.20
>  [link 
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20|https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20]
>  and I tried without success the following description assigned above in the 
> release version notes 2.5.20 with :
> {code:java}
> 
> 
> {code}
>  https://issues.apache.org/jira/browse/WW-4984
>  
> Thanks in advance for your support.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Reopened] (WW-4972) Switch to latest freemarker version when defining incompatible_improvements

2019-01-20 Thread Lukasz Lenart (JIRA)


 [ 
https://issues.apache.org/jira/browse/WW-4972?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukasz Lenart reopened WW-4972:
---

I have discovered an issue with this change, anyone using {{?html}} in 
templates will be affected, e.g. struts2-bootstrap-plugin

> Switch to latest freemarker version when defining incompatible_improvements
> ---
>
> Key: WW-4972
> URL: https://issues.apache.org/jira/browse/WW-4972
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results
>Reporter: Lukasz Lenart
>Assignee: Lukasz Lenart
>Priority: Major
> Fix For: 2.6
>
>
> Right now Struts fallbacks into {{VERSION_2_3_0}} when defining a FreeMarker 
> manager, it would be better to use the latest version and allow users to 
> switch back to the previous version on demand.
> There is already a method {{getFreemarkerVersion}} in the FreeMarker Manager 
> that need to be adjusted.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)


[jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available

2019-01-20 Thread Lukasz Lenart (JIRA)


[ 
https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16747474#comment-16747474
 ] 

Lukasz Lenart commented on WW-5004:
---

Looks like we have a bug and setting {{struts.ognl.allowStaticMethodAccess}} to 
{{true}} does nothing.

> No more calling of a static variable in Struts 2.8.20 available
> ---
>
> Key: WW-5004
> URL: https://issues.apache.org/jira/browse/WW-5004
> Project: Struts 2
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.5.20
> Environment: Java 7.1 and JSP Websites
>Reporter: Deniz Renkligül
>Priority: Critical
>  Labels: build, features, patch, usability
> Fix For: 2.5.21, 2.6
>
>
> After the update from Struts 2.5.18 to 2.5.20 it is not more possible to call 
> a java static variable in JSP like
> {code:java}
> 
> {code}
> Please see for more details the release notes of 2.5.20
>  [link 
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20|https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20]
>  and I tried without success the following description assigned above in the 
> release version notes 2.5.20 with :
> {code:java}
> 
> 
> {code}
>  https://issues.apache.org/jira/browse/WW-4984
>  
> Thanks in advance for your support.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)