Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

2013-11-26 Thread Miguel Almeida
Picking up on this topic, I noticed that disabling this feature will break any JSPs where you've set the action in the tag instead of the tag. This is particularly problematic in situations where for some reason you have one form with two submit tags, since the submit is the only place where yo

Sending email on uncought exception problems

2013-11-26 Thread Lukasz Lichota
hello, I'd like to run some java code on any uncought exception but so far I cannot find a solution. Under this link I found the exactly same question but I do not know how to apply solution. http://markmail.org/search/?q=global+exception+redirect+list%3Aorg.apache.struts.users%2F#query:global%20e

Re: Sending email on uncought exception problems

2013-11-26 Thread Lukasz Lenart
2013/11/26 Lukasz Lichota : > hello, > > I'd like to run some java code on any uncought exception but so far I > cannot find a solution. > Under this link I found the exactly same question but I do not know how to > apply solution. > http://markmail.org/search/?q=global+exception+redirect+list%3Aor

Re: Sending email on uncought exception problems

2013-11-26 Thread Lukasz Lichota
On 26 November 2013 15:29, Lukasz Lenart wrote: > > Any action is always available on ValueStack, so you must add > notifyAdmin(exception) to the base action class. > > I tried it but it did not work (unless I did something wrong). If any action is on ValueStack, why should I add it to base class

Re: Sending email on uncought exception problems

2013-11-26 Thread Dave Newton
Why not use an interceptor? Dave On Tue, Nov 26, 2013 at 7:44 AM, Lukasz Lichota wrote: > hello, > > I'd like to run some java code on any uncought exception but so far I > cannot find a solution. > Under this link I found the exactly same question but I do not know how to > apply solution. >

Re: Sending email on uncought exception problems

2013-11-26 Thread Lukasz Lenart
2013/11/26 Lukasz Lichota : > I tried it but it did not work (unless I did something wrong). If any > action is on ValueStack, why should I add it to base class and not to any > random action I pick up? ValueStack is per created per request, so you don't know which action exactly it will be. Reg

Re: Sending email on uncought exception problems

2013-11-26 Thread Miguel Almeida
The first thought I had was also that this might be better suited on an interceptor. You'll also have more control over the desired behaviour since interceptors are more easily testable than JSPs. Miguel On Tue, 2013-11-26 at 09:43 -0500, Dave Newton wrote: > Why not use an interceptor? > > Dave

Re: Struts 2 Testing Actions

2013-11-26 Thread Damian Blazejewski
I have managed to sort it out. My project has two maven modules and one parent pom common for those modules. Tests are located in on of the submodules. As turns out, when I add servlet-api and jsp-api dependencies to the parent pom, the error is present. However, when I move those two dependencies

Will I get sideeffects with: OgnlRuntime.setSecurityManager(null);

2013-11-26 Thread Fredrik Andersson
Hello! (Hope this is the correct forum for this question) I get this error in my hello-world-struts2-webapp when I run it in my tomcat with the catalina.policy. (Btw my catalina.policy is edited a bit to match my production env: http://pastie.org/8510824) /-- Encapsulated exception ---

Re: Will I get sideeffects with: OgnlRuntime.setSecurityManager(null);

2013-11-26 Thread Damian Blazejewski
What is the access modifier of method WelcomeUserAction.setUsername()? Pozdrawiam/Best regards, Damian Błażejewski dblazejewski.com 2013/11/26 Fredrik Andersson > Hello! > > (Hope this is the correct forum for this question) > > > > I get this error in my hello-world-struts2-webapp when I run

Re: Will I get sideeffects with: OgnlRuntime.setSecurityManager(null);

2013-11-26 Thread Lukasz Lenart
This should help [1] and you must add these (I cannot find the correct link with exact example for Struts2) permission java.lang.reflect.ReflectPermission "suppressAccessChecks"; permission java.lang.RuntimePermission "*"; permission ognl.OgnlInvokePermission "*"; [1] https://confluence.atlassia