[jira] [Created] (WW-5265) Allow removal of a single/specific container provider

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5265:
---

 Summary: Allow removal of a single/specific container provider 
 Key: WW-5265
 URL: https://issues.apache.org/jira/browse/WW-5265
 Project: Struts 2
  Issue Type: Improvement
  Components: Core
Reporter: Kusal Kithul-Godage


As per title, this functionality would allow for adding container providers 
that may be short-lived, or in modular/plugin-based system.

Given that `ConfigurationManager#getContainerProviders`, 
`ConfigurationManager#clearContainerProviders` and 
`ConfigurationManager#addContainerProvider(ContainerProvider)` exist, this is 
already possible, but the existence of an explicit method would make it more 
performant.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (WW-5266) Add configuration option for a per-file max size for multipart requests

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5266:
---

 Summary: Add configuration option for a per-file max size for 
multipart requests
 Key: WW-5266
 URL: https://issues.apache.org/jira/browse/WW-5266
 Project: Struts 2
  Issue Type: Improvement
  Components: Core
Reporter: Kusal Kithul-Godage


In addition to the existing `struts.multipart.maxSize`, allow the configuration 
of a per-file max size using `struts.multipart.maxFileSize`



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (WW-5267) Add configuration option to generate ActionContext even for excluded urls

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5267:
---

 Summary: Add configuration option to generate ActionContext even 
for excluded urls
 Key: WW-5267
 URL: https://issues.apache.org/jira/browse/WW-5267
 Project: Struts 2
  Issue Type: Improvement
  Components: Core
Reporter: Kusal Kithul-Godage


There are scenarios where you may want to except a request from Struts 
filtering/processing using `struts.action.excludePattern`, however you may 
still want that request to undergo filtering such as SiteMesh, which requires 
the ActionContext to be present.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Created] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2022-12-12 Thread Kusal Kithul-Godage (Jira)
Kusal Kithul-Godage created WW-5268:
---

 Summary: Add configuration option to exempt classes from OGNL 
package exclusions
 Key: WW-5268
 URL: https://issues.apache.org/jira/browse/WW-5268
 Project: Struts 2
  Issue Type: Improvement
  Components: Core
Reporter: Kusal Kithul-Godage


It is currently possible to exclude packages from OGNL evaluation using 
`struts.excludedPackageNamePatterns` and `struts.excludedPackageNames`.

There may exist a scenario where you wish to have certain packages 
excluded/blocklisted by default, but exempt specific classes from these 
packages that have been assessed to be safe.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Work logged] (WW-5265) Allow removal of a single/specific container provider

2022-12-12 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5265?focusedWorklogId=832860&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-832860
 ]

ASF GitHub Bot logged work on WW-5265:
--

Author: ASF GitHub Bot
Created on: 12/Dec/22 19:47
Start Date: 12/Dec/22 19:47
Worklog Time Spent: 10m 
  Work Description: kusalk opened a new pull request, #645:
URL: https://github.com/apache/struts/pull/645

   Implements WW-5265
   
   Also fixed mixed use of tabs and spaces in test class




Issue Time Tracking
---

Worklog Id: (was: 832860)
Remaining Estimate: 0h
Time Spent: 10m

> Allow removal of a single/specific container provider 
> --
>
> Key: WW-5265
> URL: https://issues.apache.org/jira/browse/WW-5265
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
>  Time Spent: 10m
>  Remaining Estimate: 0h
>
> As per title, this functionality would allow for adding container providers 
> that may be short-lived, or in modular/plugin-based system.
> Given that `ConfigurationManager#getContainerProviders`, 
> `ConfigurationManager#clearContainerProviders` and 
> `ConfigurationManager#addContainerProvider(ContainerProvider)` exist, this is 
> already possible, but the existence of an explicit method would make it more 
> performant.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Work logged] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5264?focusedWorklogId=832941&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-832941
 ]

ASF GitHub Bot logged work on WW-5264:
--

Author: ASF GitHub Bot
Created on: 13/Dec/22 06:34
Start Date: 13/Dec/22 06:34
Worklog Time Spent: 10m 
  Work Description: lukaszlenart opened a new pull request, #646:
URL: https://github.com/apache/struts/pull/646

   Refs [WW-5264](https://issues.apache.org/jira/browse/WW-5264)




Issue Time Tracking
---

Worklog Id: (was: 832941)
Time Spent: 1h 10m  (was: 1h)

> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF subversion and git services (Jira)


[ 
https://issues.apache.org/jira/browse/WW-5264?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646456#comment-17646456
 ] 

ASF subversion and git services commented on WW-5264:
-

Commit 63dd9536cab7c1d10baea11c2b35ce9ea3ca06f0 in struts's branch 
refs/heads/WW-5264-xslt-cleanup from Lukasz Lenart
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=63dd9536c ]

WW-5264 Removes XSLTResult from struts-default.xml as it was moved into plugin


> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1h
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (WW-5265) Allow removal of a single/specific container provider

2022-12-12 Thread Lukasz Lenart (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5265?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukasz Lenart updated WW-5265:
--
Fix Version/s: 6.2.0

> Allow removal of a single/specific container provider 
> --
>
> Key: WW-5265
> URL: https://issues.apache.org/jira/browse/WW-5265
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
> Fix For: 6.2.0
>
>  Time Spent: 10m
>  Remaining Estimate: 0h
>
> As per title, this functionality would allow for adding container providers 
> that may be short-lived, or in modular/plugin-based system.
> Given that `ConfigurationManager#getContainerProviders`, 
> `ConfigurationManager#clearContainerProviders` and 
> `ConfigurationManager#addContainerProvider(ContainerProvider)` exist, this is 
> already possible, but the existence of an explicit method would make it more 
> performant.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF subversion and git services (Jira)


[ 
https://issues.apache.org/jira/browse/WW-5264?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646457#comment-17646457
 ] 

ASF subversion and git services commented on WW-5264:
-

Commit d11cf771b64bd1350d1e181a917b6beb106d0f6b in struts's branch 
refs/heads/WW-5264-xslt-cleanup from Lukasz Lenart
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=d11cf771b ]

WW-5264 Uses proper parent package when testing XSLT result


> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [struts] sonarcloud[bot] commented on pull request #646: [WW-5264] Removes XSLTResult from struts-default.xml as it was moved in to plugin

2022-12-12 Thread GitBox


sonarcloud[bot] commented on PR #646:
URL: https://github.com/apache/struts/pull/646#issuecomment-1347823908

   Kudos, SonarCloud Quality Gate passed!    [![Quality Gate 
passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/passed-16px.png
 'Quality Gate 
passed')](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=646)
   
   
[![Bug](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/bug-16px.png
 
'Bug')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
 [0 
Bugs](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
  
   
[![Vulnerability](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/vulnerability-16px.png
 
'Vulnerability')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
 [0 
Vulnerabilities](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
  
   [![Security 
Hotspot](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/security_hotspot-16px.png
 'Security 
Hotspot')](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
 [0 Security 
Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
  
   [![Code 
Smell](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/code_smell-16px.png
 'Code 
Smell')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
 [0 Code 
Smells](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
   
   [![No Coverage 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/CoverageChart/NoCoverageInfo-16px.png
 'No Coverage 
information')](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=646&metric=coverage&view=list)
 No Coverage information  
   [![No Duplication 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/Duplications/NoDuplicationInfo-16px.png
 'No Duplication 
information')](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=646&metric=duplicated_lines_density&view=list)
 No Duplication information
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@struts.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Work logged] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5264?focusedWorklogId=832945&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-832945
 ]

ASF GitHub Bot logged work on WW-5264:
--

Author: ASF GitHub Bot
Created on: 13/Dec/22 06:50
Start Date: 13/Dec/22 06:50
Worklog Time Spent: 10m 
  Work Description: sonarcloud[bot] commented on PR #646:
URL: https://github.com/apache/struts/pull/646#issuecomment-1347823908

   Kudos, SonarCloud Quality Gate passed!    [![Quality Gate 
passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/passed-16px.png
 'Quality Gate 
passed')](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=646)
   
   
[![Bug](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/bug-16px.png
 
'Bug')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
 [0 
Bugs](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=BUG)
  
   
[![Vulnerability](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/vulnerability-16px.png
 
'Vulnerability')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
 [0 
Vulnerabilities](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=VULNERABILITY)
  
   [![Security 
Hotspot](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/security_hotspot-16px.png
 'Security 
Hotspot')](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
 [0 Security 
Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_struts&pullRequest=646&resolved=false&types=SECURITY_HOTSPOT)
  
   [![Code 
Smell](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/code_smell-16px.png
 'Code 
Smell')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
 
[![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png
 
'A')](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
 [0 Code 
Smells](https://sonarcloud.io/project/issues?id=apache_struts&pullRequest=646&resolved=false&types=CODE_SMELL)
   
   [![No Coverage 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/CoverageChart/NoCoverageInfo-16px.png
 'No Coverage 
information')](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=646&metric=coverage&view=list)
 No Coverage information  
   [![No Duplication 
information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/Duplications/NoDuplicationInfo-16px.png
 'No Duplication 
information')](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=646&metric=duplicated_lines_density&view=list)
 No Duplication information
   
   




Issue Time Tracking
---

Worklog Id: (was: 832945)
Time Spent: 1h 20m  (was: 1h 10m)

> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1h 20m
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Work logged] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5264?focusedWorklogId=832949&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-832949
 ]

ASF GitHub Bot logged work on WW-5264:
--

Author: ASF GitHub Bot
Created on: 13/Dec/22 07:13
Start Date: 13/Dec/22 07:13
Worklog Time Spent: 10m 
  Work Description: lukaszlenart merged PR #646:
URL: https://github.com/apache/struts/pull/646




Issue Time Tracking
---

Worklog Id: (was: 832949)
Time Spent: 1.5h  (was: 1h 20m)

> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF subversion and git services (Jira)


[ 
https://issues.apache.org/jira/browse/WW-5264?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646465#comment-17646465
 ] 

ASF subversion and git services commented on WW-5264:
-

Commit 63dd9536cab7c1d10baea11c2b35ce9ea3ca06f0 in struts's branch 
refs/heads/master from Lukasz Lenart
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=63dd9536c ]

WW-5264 Removes XSLTResult from struts-default.xml as it was moved into plugin


> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF subversion and git services (Jira)


[ 
https://issues.apache.org/jira/browse/WW-5264?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646466#comment-17646466
 ] 

ASF subversion and git services commented on WW-5264:
-

Commit d11cf771b64bd1350d1e181a917b6beb106d0f6b in struts's branch 
refs/heads/master from Lukasz Lenart
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=d11cf771b ]

WW-5264 Uses proper parent package when testing XSLT result


> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Commented] (WW-5264) Extract XSLT result into a dedicated plugin

2022-12-12 Thread ASF subversion and git services (Jira)


[ 
https://issues.apache.org/jira/browse/WW-5264?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646467#comment-17646467
 ] 

ASF subversion and git services commented on WW-5264:
-

Commit 0d81cdd85db79fcc8515bb6735814daec3a84ca6 in struts's branch 
refs/heads/master from Lukasz Lenart
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=0d81cdd85 ]

Merge pull request #646 from apache/WW-5264-xslt-cleanup

[WW-5264] Removes XSLTResult from struts-default.xml as it was moved in to 
plugin

> Extract XSLT result into a dedicated plugin
> ---
>
> Key: WW-5264
> URL: https://issues.apache.org/jira/browse/WW-5264
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core Results, Plugin - XSLT
>Reporter: Lukasz Lenart
>Priority: Major
> Fix For: 6.2.0
>
>  Time Spent: 1.5h
>  Remaining Estimate: 0h
>
> XSLT result can be easily extracted into a dedicated plugin - this will allow 
> users to include it when needed



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [struts] lukaszlenart commented on pull request #645: WW-5265 Allow removal of a single/specific container provider

2022-12-12 Thread GitBox


lukaszlenart commented on PR #645:
URL: https://github.com/apache/struts/pull/645#issuecomment-1347845099

   @kusalk could you rebase this PR over the `master` branch? I found one issue 
that prevents running Sonar scan, sorry for that :( 
   Depends on #646 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@struts.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Work logged] (WW-5265) Allow removal of a single/specific container provider

2022-12-12 Thread ASF GitHub Bot (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5265?focusedWorklogId=832952&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-832952
 ]

ASF GitHub Bot logged work on WW-5265:
--

Author: ASF GitHub Bot
Created on: 13/Dec/22 07:14
Start Date: 13/Dec/22 07:14
Worklog Time Spent: 10m 
  Work Description: lukaszlenart commented on PR #645:
URL: https://github.com/apache/struts/pull/645#issuecomment-1347845099

   @kusalk could you rebase this PR over the `master` branch? I found one issue 
that prevents running Sonar scan, sorry for that :( 
   Depends on #646 




Issue Time Tracking
---

Worklog Id: (was: 832952)
Time Spent: 20m  (was: 10m)

> Allow removal of a single/specific container provider 
> --
>
> Key: WW-5265
> URL: https://issues.apache.org/jira/browse/WW-5265
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
> Fix For: 6.2.0
>
>  Time Spent: 20m
>  Remaining Estimate: 0h
>
> As per title, this functionality would allow for adding container providers 
> that may be short-lived, or in modular/plugin-based system.
> Given that `ConfigurationManager#getContainerProviders`, 
> `ConfigurationManager#clearContainerProviders` and 
> `ConfigurationManager#addContainerProvider(ContainerProvider)` exist, this is 
> already possible, but the existence of an explicit method would make it more 
> performant.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[GitHub] [struts] dependabot[bot] commented on pull request #644: Bump spring-web from 5.3.23 to 6.0.0

2022-12-12 Thread GitBox


dependabot[bot] commented on PR #644:
URL: https://github.com/apache/struts/pull/644#issuecomment-1347882394

   OK, I won't notify you again about this release, but will get in touch when 
a new version is available. If you'd rather skip all updates until the next 
major or minor version, let me know by commenting `@dependabot ignore this 
major version` or `@dependabot ignore this minor version`.
   
   If you change your mind, just re-open this PR and I'll resolve any conflicts 
on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@struts.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



[jira] [Updated] (WW-5266) Add configuration option for a per-file max size for multipart requests

2022-12-12 Thread Lukasz Lenart (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5266?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukasz Lenart updated WW-5266:
--
Fix Version/s: 6.2.0

> Add configuration option for a per-file max size for multipart requests
> ---
>
> Key: WW-5266
> URL: https://issues.apache.org/jira/browse/WW-5266
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
> Fix For: 6.2.0
>
>
> In addition to the existing `struts.multipart.maxSize`, allow the 
> configuration of a per-file max size using `struts.multipart.maxFileSize`



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (WW-5267) Add configuration option to generate ActionContext even for excluded urls

2022-12-12 Thread Lukasz Lenart (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukasz Lenart updated WW-5267:
--
Fix Version/s: 6.2.0

> Add configuration option to generate ActionContext even for excluded urls
> -
>
> Key: WW-5267
> URL: https://issues.apache.org/jira/browse/WW-5267
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
> Fix For: 6.2.0
>
>
> There are scenarios where you may want to except a request from Struts 
> filtering/processing using `struts.action.excludePattern`, however you may 
> still want that request to undergo filtering such as SiteMesh, which requires 
> the ActionContext to be present.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (WW-5268) Add configuration option to exempt classes from OGNL package exclusions

2022-12-12 Thread Lukasz Lenart (Jira)


 [ 
https://issues.apache.org/jira/browse/WW-5268?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lukasz Lenart updated WW-5268:
--
Fix Version/s: 6.2.0

> Add configuration option to exempt classes from OGNL package exclusions
> ---
>
> Key: WW-5268
> URL: https://issues.apache.org/jira/browse/WW-5268
> Project: Struts 2
>  Issue Type: Improvement
>  Components: Core
>Reporter: Kusal Kithul-Godage
>Priority: Minor
> Fix For: 6.2.0
>
>
> It is currently possible to exclude packages from OGNL evaluation using 
> `struts.excludedPackageNamePatterns` and `struts.excludedPackageNames`.
> There may exist a scenario where you wish to have certain packages 
> excluded/blocklisted by default, but exempt specific classes from these 
> packages that have been assessed to be safe.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)