[
http://www.stripesframework.org/jira/browse/STS-705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=11736#action_11736
]
Marcus Kraßmann commented on STS-705:
-------------------------------------
Sorry, forgot to append the stacktrace:
net.sourceforge.stripes.exception.StripesRuntimeException: Submission of a
wizard form in Stripes absolutely requires that the hidden field Stripes writes
containing the names of the fields present on the form is present and encrypted
(as Stripes write it). This is necessary to prevent a user from spoofing the
system and getting around any security/data checks.
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.getFieldsPresentInfo(DefaultActionBeanPropertyBinder.java:333)
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.bindMissingValuesAsNull(DefaultActionBeanPropertyBinder.java:303)
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.bind(DefaultActionBeanPropertyBinder.java:204)
net.sourceforge.stripes.controller.DispatcherHelper$3.intercept(DispatcherHelper.java:194)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:158)
org.stripesstuff.plugin.security.SecurityInterceptor.interceptBindingAndValidation(SecurityInterceptor.java:152)
org.stripesstuff.plugin.security.SecurityInterceptor.intercept(SecurityInterceptor.java:117)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:155)
net.sourceforge.stripes.controller.BeforeAfterMethodInterceptor.intercept(BeforeAfterMethodInterceptor.java:113)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:155)
net.sourceforge.stripes.controller.ExecutionContext.wrap(ExecutionContext.java:74)
net.sourceforge.stripes.controller.DispatcherHelper.doBindingAndValidation(DispatcherHelper.java:190)
net.sourceforge.stripes.tag.UseActionBeanTag.doStartTag(UseActionBeanTag.java:140)
...
> Tag useActionBean causes Exception if beanclass is a wizard
> -----------------------------------------------------------
>
> Key: STS-705
> URL: http://www.stripesframework.org/jira/browse/STS-705
> Project: Stripes
> Issue Type: Bug
> Components: ActionBean Dispatching, Tag Library
> Affects Versions: Release 1.5.1
> Reporter: Marcus Kraßmann
>
> When using <s:useActionBean var="xy" beanclass="..."> without a specified
> event on a wizard class, the DefaultActionBeanPropertyBinder is throwing an
> exception because it checks if the event name "null" is part of the wizard's
> startEvents. This blocks me from using the Stripes-Security package on wizard
> actionBeans.
> Current workaround to get it work: Specifying an empty startEvent in the
> useActionBean tag.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://www.stripesframework.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
