Re: [VOTE] Struts IntelliJ plugin v242.18973.1

2025-09-08 Thread Burton Rhodes
., 7 wrz 2025 o 09:56 Lukasz Lenart napisał(a): >> >> czw., 4 wrz 2025 o 14:42 Burton Rhodes napisał(a): >>> >>> Wondering if most are like me and can't test it out due to version >>> conflicts? Can't wait to vote once you get it working on 2025.X &g

Re: [VOTE] Struts IntelliJ plugin v242.18973.1

2025-09-04 Thread Burton Rhodes
Wondering if most are like me and can't test it out due to version conflicts? Can't wait to vote once you get it working on 2025.X (although I'm not binding) -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 9/4/2025 6:43:54 AM Subject Re: [VOTE] Struts

Re: [VOTE] Struts IntelliJ plugin v242.18973.1

2025-08-17 Thread Burton Rhodes
Lukasz, Thanks for all your hardwork on this. I would love to test it out, but I am now on version 2025.2 of IntelliJ. Are you planning on upgrading the plugin at some point to work with the 2025.X series? Thanks, Burton -- Original Message -- From "Lukasz Lenart" To "Struts Dev

Re: [VOTE] Apache Struts 7.0.3

2025-02-24 Thread Burton Rhodes
+1 GA non-binding -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 2/24/2025 6:14:25 AM Subject [VOTE] Apache Struts 7.0.3 The Apache Struts 7.0.3 test build is available. This is the first patch release of Struts 7.x series. With this release the follow

Re: [TEST] Apache Struts 7.0.3 test build is ready

2025-02-17 Thread Burton Rhodes
Thanks Lukasz! Quick question: With v7.0.3, what is the current status of the Multipart upload logic? These 2 release comments are somewhat conflicting: 6.7: WW-5528 Ensure multipart upload illegal characters reported as error by @kusalk in #1215 WW-5501 Reverts all changes related to WW-550

Re: file upload name filtering

2025-02-12 Thread Burton Rhodes
>> On Wed, Feb 12, 2025, 10:05 AM Burton Rhodes wrote: >> >> I agree with Greg. >> >> IMHO, character validation should be left to the developer which depends >> on their OS and file names supported therein. But if there needs to be >> protection against

Re: file upload name filtering

2025-02-12 Thread Burton Rhodes
I agree with Greg. IMHO, character validation should be left to the developer which depends on their OS and file names supported therein. But if there needs to be protection against a buffer overflow attack (I assume that is the problem you are trying to solve?), then the length restriction sh

Re: file upload name filtering

2025-02-10 Thread Burton Rhodes
The new default "EXCLUDED_FILE_PATTERN" is too restrictive for our application. For example, we consider files with "&" valid. That said, are we able to override the excluded file pattern in some way (e.g. struts properties)? private static final String EXCLUDED_FILE_PATTERN = "^(.*[<>&\"'|;

Re: [VOTE] Apache Struts 7.0.0

2024-12-16 Thread Burton Rhodes
[x] GA Thanks, Burton > On Dec 16, 2024, at 10:40 AM, Lukasz Lenart wrote: > > The Apache Struts 7.0.0 test build is available. This is the first and > major release of Struts 7.x series which uses Java 17 and JakartaEE. > With this release the following issues were addressed: > > Internal

Re: Struts v7.0.0-M10 missing from Maven Central

2024-12-12 Thread Burton Rhodes
e.org/content/groups/staging/ On 12/12/2024 12:30, Burton Rhodes wrote: It appears that 7.0.0-M10 is no longer available in Maven Central. Should I be pointing to a different version? The latest versions I see in the repository are: 6.7.0 and 7.0.0-M9 org.apache.struts struts2-core 7.0.0-

Struts v7.0.0-M10 missing from Maven Central

2024-12-12 Thread Burton Rhodes
It appears that 7.0.0-M10 is no longer available in Maven Central. Should I be pointing to a different version? The latest versions I see in the repository are: 6.7.0 and 7.0.0-M9 org.apache.struts struts2-core 7.0.0-M10 Thanks, Burton

Re: [TEST] Apache Struts 7.0.0-M10 test build is ready

2024-11-04 Thread Burton Rhodes
Thanks Lukasz, M10 seems to be working well in our environment. Thanks for all your hard work on this. FYI, I didn't see any mention of the package name refactoring in the migration guide. Although it will become immediately obvious when building, it might be good to include for completeness.

Re: error response on missing allowed-methods in struts.xml

2024-10-31 Thread Burton Rhodes
Did you remove your "/.m2/repository" directory and rebuild? Sometimes that does the trick if you think it's a jar issue with maven. -- Original Message -- From "Greg Huber" To dev@struts.apache.org Date 10/31/2024 9:45:58 AM Subject Re: error response on missing allowed-methods in

Re: Struts2 7.0.0-M9 repository location moved?

2024-10-20 Thread Burton Rhodes
Works perfectly. Thanks! -- Original Message -- From "Łukasz Lenart" To "Struts Developers List" Date 10/20/2024 9:48:10 AM Subject Re: Struts2 7.0.0-M9 repository location moved? Try now niedz., 20 paź 2024 o 16:29 Burton Rhodes napisał(a): Ok - we use

Re: Struts2 7.0.0-M9 repository location moved?

2024-10-20 Thread Burton Rhodes
Developers List" Date 10/20/2024 9:27:05 AM Subject Re: Struts2 7.0.0-M9 repository location moved? niedz., 20 paź 2024 o 16:06 Burton Rhodes napisał(a): It appears the Struts 2 7.0.0-M9 release has been removed from the Apache staging repository. Was this on purpose? And if so, is

Struts2 7.0.0-M9 repository location moved?

2024-10-20 Thread Burton Rhodes
It appears the Struts 2 7.0.0-M9 release has been removed from the Apache staging repository. Was this on purpose? And if so, is there another url I should be fetching it from? https://repository.apache.org/content/repositories/staging/org/apache/struts/struts2-core/ Thanks, Burton

Re: Renaming "parameters" to "attributes" in tags

2024-10-07 Thread Burton Rhodes
I would argue for changing the name to "attributes" since v7 introduces breaking changes already, and this will avoid confusion moving forward. Your PR seems to work fine in my test environment (provided I changed some of my overridden .ftl files). Just FYI, building the latest snapshot (PR 1

Re: Struts 7 release plan

2024-09-02 Thread Burton Rhodes
No objections here. Thanks, Burton -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 9/2/2024 2:20:28 AM Subject Struts 7 release plan Hi, I would like to release Struts 7 soon (there are a few outstanding issues I would like to address first) and switch

Re: IDEA plugin 2024.4

2024-07-14 Thread Burton Rhodes
: IDEA plugin 2024.4 niedz., 14 lip 2024 o 17:08 Burton Rhodes napisał(a): Thanks Lukasz - THe package installed fine, but when I attempt to apply the Struts Framework to a module (in Project Structure), I am unable to add any filesets - no files appear in the list. I've included a scree

Re: IDEA plugin 2024.4

2024-07-14 Thread Burton Rhodes
Thanks Lukasz - THe package installed fine, but when I attempt to apply the Struts Framework to a module (in Project Structure), I am unable to add any filesets - no files appear in the list. I've included a screenshot that hopefully you can view. -- Original Message -- From "Lukas

Re: [TEST] Apache Struts 7.0.0-M8 test build is ready

2024-07-12 Thread Burton Rhodes
I'm not sure if this is unique to M8, but I just turned on devMode and loading a single page in my app floods the console with these entries. I'm sure the log entries are correct, but they aren't helpful. For example, shouldn't it tell me which classes or packages or what JSP call/variable is

Re: [TEST] Apache Struts 7.0.0-M7 test build is ready

2024-06-16 Thread Burton Rhodes
I am having the same issue because many of our JSPs access Hibernate proxy objects. However, setting [struts.disallowProxyMemberAccess=false] is not working for me. I am still receiving "Access to proxy is blocked!" errors. Correcting this issue properly (by changing our JSPs) will take signif

Re: [EXTERNAL] Re: Struts2 7.x official release

2024-05-17 Thread Burton Rhodes
e work being done here, > don't get me wrong. > > -Original Message- > From: Burton Rhodes > Sent: Friday, May 17, 2024 12:07 PM > To: Struts Developers List > Subject: [EXTERNAL] Re: Struts2 7.x official release > > [You don't often get ema

Re: Struts2 7.x official release

2024-05-17 Thread Burton Rhodes
To add to Greg‘s comment, we are using M6 and production without issue. Your mileage may vary though. > On May 17, 2024, at 11:00 AM, Greg Huber wrote: > > I am not sure there is a date, but M6 is quite good and stable. > >> On 17/05/2024 10:55, Sai Charan Teja Pratti wrote: >> Hi, >> >> I

Re: [TEST] Apache Struts 7.0.0-M6 test build is read

2024-04-20 Thread Burton Rhodes
It should be 7.0.0-M6 -- Original Message -- From "Greg Huber" To "Struts Developers List" Date 4/20/2024 5:11:19 AM Subject Re: [TEST] Apache Struts 7.0.0-M6 test build is read What would be the pom fix value we need to use? 7.0.0-M6-SNAPSHOT org.apache.struts struts2-velocit

Re: Struts 7.0 Update?

2024-04-08 Thread Burton Rhodes
Thanks for the update. Your work is much appreciated. -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 4/7/2024 1:04:08 AM Subject Re: Struts 7.0 Update? pt., 5 kwi 2024 o 15:04 Burton Rhodes napisał(a): Lukasz, I just thought

Struts 7.0 Update?

2024-04-05 Thread Burton Rhodes
Lukasz, I just thought I would check in to see how the S2 7.0.0 update was coming along. There was a lot of activity there for awhile, but things have been pretty quiet lately. Anything I can help with? FWIW, I have been running 7.0.0-M3 in production without issue for the past few weeks.

Re: [EXTERNAL] [TEST] Apache Struts 7.0.0-M3 test build is ready

2024-02-26 Thread Burton Rhodes
If I'm not mistaken, M3 represents the 3rd version of "one" major initiative which includes 2 main refactors: 1) the migration from javax -> jakarta packaging and 2) upgrading to use Java JDK 17+. If you want to see all the issues related to the Struts 7.0.0 release, you can view them here h

Re: [7.0.0-M3] Error message

2024-02-09 Thread Burton Rhodes
ileUploadInterceptor: Could not find a Content-Type for upload. Verify that a valid file was submitted. -- Original Message -- From "Burton Rhodes" To "Struts Developers List" Date 2/9/2024 9:43:18 AM Subject Re: [7.0.0-M3] Error message Also, I am finding quite a

Re: [7.0.0-M3] Error message

2024-02-09 Thread Burton Rhodes
ing generated in my error logs. -- Original Message -- From "Burton Rhodes" To "Struts Developers List" Date 2/9/2024 9:38:12 AM Subject Re: [7.0.0-M3] Error message The easiest example is when a custom "saveDir" is not accessible. (e.g

Re: [7.0.0-M3] Error message

2024-02-09 Thread Burton Rhodes
2/9/2024 9:34:36 AM Subject Re: [7.0.0-M3] Error message pt., 9 lut 2024 o 16:21 Burton Rhodes napisał(a): I haven't had time yet, but I will try this weekend. Could you share a use case when it can happen? Cheers Lukasz --

Re: [7.0.0-M3] Error message

2024-02-09 Thread Burton Rhodes
the weekend pon., 5 lut 2024 o 16:51 Burton Rhodes napisał(a): When catching a FileUploadException in the AbstractMultiPartRequest.parse() method, if the final "else" is reached, the default message "struts.messages.upload.error.FileUploadException=Error uploading: {0}!"

[7.0.0-M3] Build/Run Test :: freemarker.core package does not exist

2024-02-05 Thread Burton Rhodes
I can build and install the struts code base [struts2-parent] when skipping tests; however, I am unable to run any test due to a test build error. I get "package freemarker.core does not exist" in several classes containing "import freemarker.core.*" within the [struts2-core] package. Any tip

[7.0.0-M3] Error message

2024-02-05 Thread Burton Rhodes
When catching a FileUploadException in the AbstractMultiPartRequest.parse() method, if the final "else" is reached, the default message "struts.messages.upload.error.FileUploadException=Error uploading: {0}!" (struts-messages.properties) always displays the "{0}" instead of replacing it with t

Re: [TEST] Apache Struts 7.0.0-M2 test build is ready

2024-02-03 Thread Burton Rhodes
Lukasz, Just circling back on this. Is the M2 build ready to be tested now? -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 2/1/2024 9:10:02 AM Subject Re: [TEST] Apache Struts 7.0.0-M2 test build is ready There is one issue I need to address - assembl

Re: [7.0.0-M1] Actions not setting parameters with Multi-part forms

2024-01-27 Thread Burton Rhodes
FWIW, the non-streaming parser works just fine for my applications needs. -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 1/27/2024 2:07:09 AM Subject Re: [7.0.0-M1] Actions not setting parameters with Multi-part forms I'm still working on this but b

Re: [7.0.0-M1] Actions not setting parameters with Multi-part forms

2024-01-23 Thread Burton Rhodes
"Struts Developers List" Date 1/23/2024 10:32:19 AM Subject Re: [7.0.0-M1] Actions not setting parameters with Multi-part forms wt., 23 sty 2024 o 15:23 Burton Rhodes napisał(a): A bit more testing reveals a few clues/issues: If I switch the parser to "jakarta" (i

Re: [7.0.0-M1] Actions not setting parameters with Multi-part forms

2024-01-23 Thread Burton Rhodes
the *.tmp extension breaks functionality in my application (although it's fairly trivial to fix on my end) so my vote would be to keep the original file extension - but perhaps this is a security issue? Thanks, Burton -- Original Message -- From "Burton Rhodes" To "

[7.0.0-M1] Actions not setting parameters with Multi-part forms

2024-01-22 Thread Burton Rhodes
The biggest issue I'm having at the moment is with all of my multi-part forms that include parameter data and a file. The action does receive the file, but the parameter "team.company" is set to the String value of stream, for example: "org.apache.commons.fileupload2.core.MultipartInput$ItemInpu

Re: [TEST] Apache Struts 7.0.0-M1 test build is ready

2024-01-22 Thread Burton Rhodes
Lukasz - Great work on this and all the others involved! I am just testing this out already have a few issues/questions. Is this the best place to voice those? Or another mailing list? Thanks, Burton -- Original Message -- From "Lukasz Lenart" To "Struts Developers List" Date 1