struts

struts copied to clipboard

WW-5196 use generics for RequestMap and ApplicationMap and correct SessionMap to also be of type <String, Object>

4

Assumption: - keys will always be Strings Extracted abstract class for similar logic for entries Resolves [WW-5196](https://issues.apache.org/jira/browse/WW-5196)

sdutry

[WW-5173] - Attempt to fix DI behaviour for custom cache factories

10

Hello Apache Struts Team. This is an initial attempt to fix the dependency-injection behaviour for the custom expression and BeanInfo cache factory mechanism introduced in 6.0.0 (was 2.6). It took...

JCgH4164838Gh792C124B5

WW-5184 - Add optional parameter value check to ParametersInterceptor

4

Implements [WW-5184](https://issues.apache.org/jira/browse/WW-5184) * Add optional parameter value check to ParametersInterceptor * Add Unit Tests

brianandle

[WW-5186]protect excludedClasses and excludedPackageNames

1

block unknow exp to clean excludedPackageNames and excludedClasses if attacker use 'excluded'+'PackageNames' likes blow, this patch can protect structs ``` %{ (#request.a=#@org.apache.commons.collections.BeanMap@{}) + (#request.a.setBean(#request.get('struts.valueStack')) == true) + (#request.b=#@org.apache.commons.collections.BeanMap@{}) + (#request.b.setBean(#request.get('a').get('context')))...

k4n5ha0

WW-4520 - Add prefix for CSS classes.

10

Implements [WW-4520](https://issues.apache.org/jira/browse/WW-4520)

aleksandr-m

Taking action invocation out of synchronized block on TokenSessionStoreInterceptor to reduce contention on the session id

3

We recently ran into an issue with the TokenSessionStoreInterceptor due to it's synchronized block holding until the action invocation returns. If a different action requires to check something related with...

lunalisk

[WW-5233] Include Apache Tiles code base in the Tiles plugin

1

Fixes [WW-5233](https://issues.apache.org/jira/browse/WW-5233)

lukaszlenart

WW-3691 Converts BackgroundProcess into interface and uses Executor to execute BackgroundProcess

1

Fixes [WW-3691](https://issues.apache.org/jira/browse/WW-3691)

lukaszlenart

[Preview] Struts 7.0.x

15

SNAPSHOT build is available in ASF [Snapshot repository](https://struts.apache.org/builds.html#maven-snapshots) or you can download Nightlies build from [here](https://nightlies.apache.org/struts/snapshot/)

lukaszlenart

[WW-5401] Improves logging around wrapping request and detecting multipart request

1

Closes [WW-5401](https://issues.apache.org/jira/browse/WW-5401)

lukaszlenart