[GitHub] [commons-beanutils] melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB…

2019-10-01 Thread GitBox
melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB… URL: https://github.com/apache/commons-beanutils/pull/7#issuecomment-537182968 I think the seucrity violation is being able to set the property using property utils. Reading it would be

[GitHub] [commons-beanutils] melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB…

2019-10-01 Thread GitBox
melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB… URL: https://github.com/apache/commons-beanutils/pull/7#issuecomment-537178017 Your code is wrong. Change to.. ```java BeanMap beanMap = new BeanMap(oldObject); PropertyUtil

[GitHub] [commons-beanutils] melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB…

2019-07-16 Thread GitBox
melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB… URL: https://github.com/apache/commons-beanutils/pull/7#issuecomment-511772414 @Siebes I hope so. I have been waiting for a 2.0.0 release of BeanUtils for a while.

[GitHub] [commons-beanutils] melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB…

2019-05-23 Thread GitBox
melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB… URL: https://github.com/apache/commons-beanutils/pull/7#issuecomment-495233586 Thanks @garydgregory looks like all checks passed now!

[GitHub] [commons-beanutils] melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB…

2019-05-22 Thread GitBox
melloware commented on issue #7: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesB… URL: https://github.com/apache/commons-beanutils/pull/7#issuecomment-495029626 I am not sure why Travis is failing as all the tests and code is building with "mvn clean package" on my la