[jira] [Commented] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083406#comment-15083406 ] ASF GitHub Bot commented on WW-4582: Github user victorsosa commented on the pull request

[jira] [Updated] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread victorsosa (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] victorsosa updated WW-4582: --- Description: Hi, This is a permanent patch for security issue CVE-2014-0094; this adds 'class' to exclude para

[jira] [Updated] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread victorsosa (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] victorsosa updated WW-4582: --- Description: Hi, This is a permanent patch for security issue CVE-2014-0094; this adds 'class' to exclude para

[jira] [Commented] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083236#comment-15083236 ] ASF GitHub Bot commented on WW-4582: Github user victorsosa commented on a diff in the pu

[jira] [Commented] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083166#comment-15083166 ] ASF GitHub Bot commented on WW-4582: Github user lukaszlenart commented on a diff in the

[jira] [Assigned] (WW-4568) Upgrade Tiles 2 to latest available Tiles 2 version

2016-01-05 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-4568?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lukasz Lenart reassigned WW-4568: - Assignee: Lukasz Lenart > Upgrade Tiles 2 to latest available Tiles 2 version >

[jira] [Commented] (WW-4568) Upgrade Tiles 2 to latest available Tiles 2 version

2016-01-05 Thread Lukasz Lenart (JIRA)
[ https://issues.apache.org/jira/browse/WW-4568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083161#comment-15083161 ] Lukasz Lenart commented on WW-4568: --- It's still under review, one issue left > Upgrade Til

[jira] [Commented] (WW-4312) A problem on Iterator tag

2016-01-05 Thread Hudson (JIRA)
[ https://issues.apache.org/jira/browse/WW-4312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083042#comment-15083042 ] Hudson commented on WW-4312: SUCCESS: Integrated in Struts-JDK7-master #400 (See [https://builds

[jira] [Updated] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread victorsosa (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] victorsosa updated WW-4582: --- Description: Hi, This is a permanent patch for security issue CVE-2014-0094; this adds 'class' to exclude para

[jira] [Commented] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/WW-4582?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15083026#comment-15083026 ] ASF GitHub Bot commented on WW-4582: GitHub user victorsosa opened a pull request: h

[jira] [Created] (WW-4582) adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation)

2016-01-05 Thread victorsosa (JIRA)
victorsosa created WW-4582: -- Summary: adds 'class' to exclude params in ParametersInterceptor (avoid ClassLoader manipulation) Key: WW-4582 URL: https://issues.apache.org/jira/browse/WW-4582 Project: Struts

[jira] [Commented] (WW-4312) A problem on Iterator tag

2016-01-05 Thread ASF subversion and git services (JIRA)
[ https://issues.apache.org/jira/browse/WW-4312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082999#comment-15082999 ] ASF subversion and git services commented on WW-4312: - Commit 4f29d8861a5

[jira] [Comment Edited] (WW-4568) Upgrade Tiles 2 to latest available Tiles 2 version

2016-01-05 Thread victorsosa (JIRA)
[ https://issues.apache.org/jira/browse/WW-4568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082913#comment-15082913 ] victorsosa edited comment on WW-4568 at 1/5/16 12:01 PM: - Hi Lukasz L

[jira] [Commented] (WW-4568) Upgrade Tiles 2 to latest available Tiles 2 version

2016-01-05 Thread victorsosa (JIRA)
[ https://issues.apache.org/jira/browse/WW-4568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082913#comment-15082913 ] victorsosa commented on WW-4568: Hi Lukasz Lenart, you commit this code already :+1: > Upgr

[jira] [Commented] (WW-4482) Conversion annotation ignored for ServletAction parameter

2016-01-05 Thread Sanjeev Kumar (JIRA)
[ https://issues.apache.org/jira/browse/WW-4482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082888#comment-15082888 ] Sanjeev Kumar commented on WW-4482: --- Nice to have this fixed. > Conversion annotation igno

[jira] [Commented] (WW-4507) Struts 2 XSS vulnerability with

2016-01-05 Thread Rene Gielen (JIRA)
[ https://issues.apache.org/jira/browse/WW-4507?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082735#comment-15082735 ] Rene Gielen commented on WW-4507: - I have tried to reproduce this with a page encoding of ISO

[jira] [Commented] (WW-4312) A problem on Iterator tag

2016-01-05 Thread Hudson (JIRA)
[ https://issues.apache.org/jira/browse/WW-4312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15082609#comment-15082609 ] Hudson commented on WW-4312: SUCCESS: Integrated in Struts-JDK7-master #399 (See [https://builds