[jira] [Commented] (LANG-871) [XSS] Possible attacks through StringEscapeUtils.escapeEcmaScript?

2013-12-02 Thread Andy Reek (JIRA)
[ https://issues.apache.org/jira/browse/LANG-871?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13836380#comment-13836380 ] Andy Reek commented on LANG-871: Hi Maurizio, just take the example above: \ In Apache

[jira] [Updated] (LANG-871) [XSS] Possible attacks through StringEscapeUtils.escapeEcmaScript?

2013-12-02 Thread Andy Reek (JIRA)
[ https://issues.apache.org/jira/browse/LANG-871?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andy Reek updated LANG-871: --- Description: org.apache.commons.lang3.StringEscapeUtils.escapeEcmaScript does the escape via a prefixed '\' on

[jira] [Created] (VALIDATOR-325) IBAN validation not calculated correctly

2013-12-02 Thread Wim Vleugels (JIRA)
Wim Vleugels created VALIDATOR-325: -- Summary: IBAN validation not calculated correctly Key: VALIDATOR-325 URL: https://issues.apache.org/jira/browse/VALIDATOR-325 Project: Commons Validator

[jira] [Created] (MATH-1069) Make RealLinearOperator an interface

2013-12-02 Thread Konstantin Berlin (JIRA)
Konstantin Berlin created MATH-1069: --- Summary: Make RealLinearOperator an interface Key: MATH-1069 URL: https://issues.apache.org/jira/browse/MATH-1069 Project: Commons Math Issue Type:

[jira] [Reopened] (SCXML-177) Correct error/warning messages in SCXML reading to be up-to-date

2013-12-02 Thread Woonsan Ko (JIRA)
[ https://issues.apache.org/jira/browse/SCXML-177?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Woonsan Ko reopened SCXML-177: -- Reopening this because it doesn't give a warning or error when there's a custom action with wrong local

[jira] [Commented] (LANG-871) [XSS] Possible attacks through StringEscapeUtils.escapeEcmaScript?

2013-12-02 Thread Sebb (JIRA)
[ https://issues.apache.org/jira/browse/LANG-871?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13836785#comment-13836785 ] Sebb commented on LANG-871: --- I guess the question is: would using hex-encoding for all but

[jira] [Comment Edited] (LANG-871) [XSS] Possible attacks through StringEscapeUtils.escapeEcmaScript?

2013-12-02 Thread Sebb (JIRA)
[ https://issues.apache.org/jira/browse/LANG-871?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13836785#comment-13836785 ] Sebb edited comment on LANG-871 at 12/2/13 6:54 PM: I guess the question

[jira] [Created] (BEANUTILS-455) WrapDynaBeans always use the default PropertyUtilsBean instance

2013-12-02 Thread Oliver Heger (JIRA)
Oliver Heger created BEANUTILS-455: -- Summary: WrapDynaBeans always use the default PropertyUtilsBean instance Key: BEANUTILS-455 URL: https://issues.apache.org/jira/browse/BEANUTILS-455 Project:

[jira] [Resolved] (DBCP-349) Insert clob or blob with oracle connection crashes software

2013-12-02 Thread Mark Thomas (JIRA)
[ https://issues.apache.org/jira/browse/DBCP-349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Thomas resolved DBCP-349. -- Resolution: Invalid Fix Version/s: (was: 1.4.1) (was: 1.3.1) Resolving

[jira] [Commented] (SCXML-177) Correct error/warning messages in SCXML reading to be up-to-date

2013-12-02 Thread Woonsan Ko (JIRA)
[ https://issues.apache.org/jira/browse/SCXML-177?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13836990#comment-13836990 ] Woonsan Ko commented on SCXML-177: -- Committed the changes to give a proper warning when

[jira] [Created] (SCXML-179) Leave more context (location) information when failing to execute JEXL scripts

2013-12-02 Thread Woonsan Ko (JIRA)
Woonsan Ko created SCXML-179: Summary: Leave more context (location) information when failing to execute JEXL scripts Key: SCXML-179 URL: https://issues.apache.org/jira/browse/SCXML-179 Project: Commons

[jira] [Resolved] (DBCP-405) getAutoCommit in PoolableConnectionFactory

2013-12-02 Thread Mark Thomas (JIRA)
[ https://issues.apache.org/jira/browse/DBCP-405?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Thomas resolved DBCP-405. -- Resolution: Fixed Fix Version/s: 2.0 1.5.1 1.4.1

[jira] [Updated] (SCXML-179) Leave more context (location) information when failing to execute JEXL scripts

2013-12-02 Thread Woonsan Ko (JIRA)
[ https://issues.apache.org/jira/browse/SCXML-179?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Woonsan Ko updated SCXML-179: - Description: Currently, it doesn't give enough context (location) information in warning logs when there

[jira] [Commented] (SCXML-179) Leave more context (location) information when failing to execute JEXL scripts

2013-12-02 Thread Woonsan Ko (JIRA)
[ https://issues.apache.org/jira/browse/SCXML-179?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13837285#comment-13837285 ] Woonsan Ko commented on SCXML-179: -- Improved SimpleErrorReporter.java. Now it leaves the

[jira] [Resolved] (SCXML-179) Leave more context (location) information when failing to execute JEXL scripts

2013-12-02 Thread Woonsan Ko (JIRA)
[ https://issues.apache.org/jira/browse/SCXML-179?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Woonsan Ko resolved SCXML-179. -- Resolution: Fixed Leave more context (location) information when failing to execute JEXL scripts

[jira] [Commented] (VALIDATOR-325) IBAN validation not calculated correctly

2013-12-02 Thread Niall Pemberton (JIRA)
[ https://issues.apache.org/jira/browse/VALIDATOR-325?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13837299#comment-13837299 ] Niall Pemberton commented on VALIDATOR-325: --- Its been quite a while since I