Re: struts 2, writing a custom tag that is able to access objects in ActionContext using OGNL

2012-09-10 Thread Lukasz Lenart 
2012/9/11 G.Subramanian :
> Hi, i'hv created a custom tag in Strtus 2. where, from action iam passing a
> arrayList object in the value attribute when custom tag java is calling.
> please tell me how to take that arrayList object in my custom tag java file.
> give me some exmple code.

And how do you map that arrayList to html ? It's hard to understand
your problem without a code example.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: struts 2, writing a custom tag that is able to access objects in ActionContext using OGNL

2012-09-10 Thread G.Subramanian 
Hi, i'hv created a custom tag in Strtus 2. where, from action iam passing a
arrayList object in the value attribute when custom tag java is calling.
please tell me how to take that arrayList object in my custom tag java file.
give me some exmple code.

 

Best Regards,

Subramanian.G

Re: Is Struts v1.3.10 Actively Assessed for Security Vulnerabilities?

2012-09-10 Thread Lukasz Lenart 
2012/9/10 Garry S Ditzler :
> There is a security vulnerability report, CVE-2012-1007, that was released
> on 02/07/2012 for Struts v1.3.10.  There doesn't appear to be a response
> or available patch from the Apache Struts organization on this issue.
>
> Since v1.3.10 general availability date of 04 December 2008, there has not
> been any notable activity for this release.
>
> Is Struts v1.3.10 actively assessed for security vulnerabilities and
> security fixes?

Yes, it is, but the problem is just with the example applications
bundled with S1 - they aren't the best examples in case of security.
Struts 2 was released with sanitised examples, and probably we must do
the same with S1.


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Running Struts1 and Struts2 together?

2012-09-10 Thread Greg Lindholm 
Sorry, I don't know anything about UserPrincipal.

On Mon, Sep 10, 2012 at 3:52 AM, vsendhil  wrote:

> Hi,
>
> I followed the steps from the threads and have set up the application.  But
> I have issues while getting UserPrincipal inside struts 2 action.
> (getServletRequest().getUserPrincipal()).  The principal object is always
> null in struts 2 action.
>
> My existing application uses Struts 1.3 and WAS 7.0.  We are using
> JSecurity
> for authentication.  I am able to get the Principal object inside my struts
> 1 action.  But the principal object is null inside the struts 2 action.
>
> Do we need to do any thing specific to expose the principal object to
> struts
> 2 action?
>
>
> Greg Lindholm-2 wrote
> >
> > OK, I successfully integrated Struts 2 into a Struts 1 application, it
> > was actually pretty easy.
> > The main thing I had to do was manually craft the links between the S1
> > and S2 sides using standard JSTL . All
> > this meant was I have hardcoded extensions (.do and .action) in the
> > jsp's.
> > I also ended up cleaning up and removing an bunch of S1  tags
> > and replaced with std JSTL.
> >
> >
> >
> > On Mon, Aug 30, 2010 at 11:05 AM, Stephen Turner  wrote:
> >> On Mon, 23 Aug 2010 14:22:54 -0400, Greg Lindholm  >
> >> wrote:
> >>
> >>> Is there any issues with running Struts1 and Struts2 together in the
> >>> same application?
> >>>
> >>> I have a couple old Struts1 applications which I plan on converting to
> >>> Struts2 over time, but would like to start doing new development in
> >>> Struts2 immediately while converting the Struts1 screens and action
> >>> over bit-by-bit as needed.
> >>>
> >>
> >> How is this going Greg? I'm interested because I have a project that
> >> could
> >> use this solution, but I've no idea how big a job it is, what the
> >> pitfalls
> >> are etc.
> >>
> >> Thanks,
> >> Steve
> >>
> >> -
> >> To unsubscribe, e-mail: user-unsubscribe@.apache
> >> For additional commands, e-mail: user-help@.apache
> >>
> >>
> >
> > -
> > To unsubscribe, e-mail: user-unsubscribe@.apache
> > For additional commands, e-mail: user-help@.apache
> >
>
>
>
>
> --
> View this message in context:
> http://struts.1045723.n5.nabble.com/Running-Struts1-and-Struts2-together-tp3487943p5710606.html
> Sent from the Struts - User mailing list archive at Nabble.com.
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>
>

Is Struts v1.3.10 Actively Assessed for Security Vulnerabilities?

2012-09-10 Thread Garry S Ditzler 
There is a security vulnerability report, CVE-2012-1007, that was released 
on 02/07/2012 for Struts v1.3.10.  There doesn't appear to be a response 
or available patch from the Apache Struts organization on this issue.

Since v1.3.10 general availability date of 04 December 2008, there has not 
been any notable activity for this release.

Is Struts v1.3.10 actively assessed for security vulnerabilities and 
security fixes?

Thanks in advance,

Garry

Re: Running Struts1 and Struts2 together?

2012-09-10 Thread Lukasz Lenart 
Try to search the group archive - there was something about WAS and
Struts2 also this might help
http://struts.apache.org/2.x/docs/websphere.html


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

2012/9/10 vsendhil :
> Hi,
>
> I followed the steps from the threads and have set up the application.  But
> I have issues while getting UserPrincipal inside struts 2 action.
> (getServletRequest().getUserPrincipal()).  The principal object is always
> null in struts 2 action.
>
> My existing application uses Struts 1.3 and WAS 7.0.  We are using JSecurity
> for authentication.  I am able to get the Principal object inside my struts
> 1 action.  But the principal object is null inside the struts 2 action.
>
> Do we need to do any thing specific to expose the principal object to struts
> 2 action?
>
>
> Greg Lindholm-2 wrote
>>
>> OK, I successfully integrated Struts 2 into a Struts 1 application, it
>> was actually pretty easy.
>> The main thing I had to do was manually craft the links between the S1
>> and S2 sides using standard JSTL . All
>> this meant was I have hardcoded extensions (.do and .action) in the
>> jsp's.
>> I also ended up cleaning up and removing an bunch of S1  tags
>> and replaced with std JSTL.
>>
>>
>>
>> On Mon, Aug 30, 2010 at 11:05 AM, Stephen Turner  wrote:
>>> On Mon, 23 Aug 2010 14:22:54 -0400, Greg Lindholm 
>>> wrote:
>>>
 Is there any issues with running Struts1 and Struts2 together in the
 same application?

 I have a couple old Struts1 applications which I plan on converting to
 Struts2 over time, but would like to start doing new development in
 Struts2 immediately while converting the Struts1 screens and action
 over bit-by-bit as needed.

>>>
>>> How is this going Greg? I'm interested because I have a project that
>>> could
>>> use this solution, but I've no idea how big a job it is, what the
>>> pitfalls
>>> are etc.
>>>
>>> Thanks,
>>> Steve
>>>
>>> -
>>> To unsubscribe, e-mail: user-unsubscribe@.apache
>>> For additional commands, e-mail: user-help@.apache
>>>
>>>
>>
>> -
>> To unsubscribe, e-mail: user-unsubscribe@.apache
>> For additional commands, e-mail: user-help@.apache
>>
>
>
>
>
> --
> View this message in context: 
> http://struts.1045723.n5.nabble.com/Running-Struts1-and-Struts2-together-tp3487943p5710606.html
> Sent from the Struts - User mailing list archive at Nabble.com.
>
> -
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Re: Running Struts1 and Struts2 together?

2012-09-10 Thread vsendhil 
Hi,

I followed the steps from the threads and have set up the application.  But
I have issues while getting UserPrincipal inside struts 2 action.
(getServletRequest().getUserPrincipal()).  The principal object is always
null in struts 2 action.

My existing application uses Struts 1.3 and WAS 7.0.  We are using JSecurity
for authentication.  I am able to get the Principal object inside my struts
1 action.  But the principal object is null inside the struts 2 action.

Do we need to do any thing specific to expose the principal object to struts
2 action? 


Greg Lindholm-2 wrote
> 
> OK, I successfully integrated Struts 2 into a Struts 1 application, it
> was actually pretty easy.
> The main thing I had to do was manually craft the links between the S1
> and S2 sides using standard JSTL . All
> this meant was I have hardcoded extensions (.do and .action) in the
> jsp's.
> I also ended up cleaning up and removing an bunch of S1  tags
> and replaced with std JSTL.
> 
> 
> 
> On Mon, Aug 30, 2010 at 11:05 AM, Stephen Turner  wrote:
>> On Mon, 23 Aug 2010 14:22:54 -0400, Greg Lindholm 
>> wrote:
>>
>>> Is there any issues with running Struts1 and Struts2 together in the
>>> same application?
>>>
>>> I have a couple old Struts1 applications which I plan on converting to
>>> Struts2 over time, but would like to start doing new development in
>>> Struts2 immediately while converting the Struts1 screens and action
>>> over bit-by-bit as needed.
>>>
>>
>> How is this going Greg? I'm interested because I have a project that
>> could
>> use this solution, but I've no idea how big a job it is, what the
>> pitfalls
>> are etc.
>>
>> Thanks,
>> Steve
>>
>> -
>> To unsubscribe, e-mail: user-unsubscribe@.apache
>> For additional commands, e-mail: user-help@.apache
>>
>>
> 
> -
> To unsubscribe, e-mail: user-unsubscribe@.apache
> For additional commands, e-mail: user-help@.apache
> 




--
View this message in context: 
http://struts.1045723.n5.nabble.com/Running-Struts1-and-Struts2-together-tp3487943p5710606.html
Sent from the Struts - User mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org