Re: NullPointerException Using StrutsSpringTestCase

StrutsSpringTestCase extends StrutsTestCase which extends another class that depends on JUnit 3 not JUnit 4. So you cannot use JUnit 4 annotations and the SpringJUnit4ClassRunner. You may find this blog article helpful: http://www.brucephillips.name/blog/index.cfm/2009/12/2/Using-JUnit-To-Test

Re: provide Helloworld application in Struts2.0

You may want to read the tutorials here: http://struts.apache.org/2.2.3.1/docs/getting-started.html There are detailed examples applications that you can download and run in Tomcat. -- View this message in context: http://struts.1045723.n5.nabble.com/provide-Helloworld-application-in-Struts2-0-

Dynamic Method Invocation Changes In Struts 2.3.1 Release

I'd previously http://www.brucephillips.name/blog/index.cfm/2011/2/19/Struts-2-Security-Vulnerability--Dynamic-Method-Invocation blogged about the security vulnerability that exists when Struts dynamic method invocation is not disabled. I was happy to learn that this vulnerability was addressed

Re: Struts2 + SHIRO, struts action can't get the values from submit page

Try specifying the Shiro filter nodes before the Struts 2 nodes in your web.xml. -- View this message in context: http://struts.1045723.n5.nabble.com/Struts2-SHIRO-struts-action-can-t-get-the-values-from-submit-page-tp5065446p5077749.html Sent from the Struts - User mailing list archive at Nabble

Re: Dynamic Method Invocation Changes In Struts 2.3.1 Release

I think you fixed the issue. Using the 2.3.2-snapshot with strict-method-invocation="true" in the package statement I now get a 404 - error with the message being Invalid method: getPassword for action recoverpassword and the description being The requested resource (Invalid method

Problem With Struts 2.3.1 and Testing Struts Portlet

I'm upgrading a Struts 2 portlet application from 2.2.3.1 to 2.3.1. A test of my Action class that extends StrutsSpringTestCase that passed when using 2.2.3.1 now fails when using version 2.3.1. I've created a simple Struts 2 portlet example application to demonstrate the issue. You can download

Re: Problem With Struts 2.3.1 and Testing Struts Portlet

JIRA issue created: https://issues.apache.org/jira/browse/WW-3733 Thank you for the assistance. Bruce -- View this message in context: http://struts.1045723.n5.nabble.com/Problem-With-Struts-2-3-1-and-Testing-Struts-Portlet-tp5103393p5110605.html Sent from the Struts - User mailing list archiv

Re: Struts2 Hello world example

Eren: Try starting with this tutorial: http://struts.apache.org/2.3.1.2/docs/how-to-create-a-struts-2-web-application.html. That tutorial provides more of a "walk-thru" for how to structure a Struts 2 web application. Bruce -- View this message in context: http://struts.1045723.n5.nabble

Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

I was researching the SessionAware interface as I'm planning on adding a tutorial on how to use the HTTP Session object from within a Struts Action class to the tutorials at: https://cwiki.apache.org/confluence/display/WW/Getting+Started https://cwiki.apache.org/confluence/display/WW/Getting+Star

Struts 2 Portlet Plugin 2.3.1.2 Breaks Using Struts For Both A Portlet and Standalone Web App

I've got a few Struts application where I use the Struts 2 portlet plugin to create a portlet and still have a standalone web application. This worked fine through Struts 2 portlet plugin version 2.2.1.1. For an example of this download and unzip this Eclipse/Maven project http://code.google.com

Re: Struts 2 Portlet Plugin 2.3.1.2 Breaks Using Struts For Both A Portlet and Standalone Web App

I created this JIRA issue: https://issues.apache.org/jira/browse/WW-3763 https://issues.apache.org/jira/browse/WW-3763 Bruce -- View this message in context: http://struts.1045723.n5.nabble.com/Struts-2-Portlet-Plugin-2-3-1-2-Breaks-Using-Struts-For-Both-A-Portlet-and-Standalone-Web-App-t

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

I appreciate your comments, but what I'd like to accomplish is what instructions should we provide in our tutorial on using the SessionAware interface in order to best mitigate the security vulnerabilities introduced when using SessionAware given how the Struts 2 framework works today. I don't thi

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

Lukasz - I agree with you, but until a new version of Struts 2 is released that includes a fix for this vulnerability, I'd like to tell Struts 2 developers what to do when implementing the SessionAware interface to mitigate the vulnerability. If you could look over what I wrote in the initial post

Re: Security Vulnerability When Using SessionAware and Best Practice For Mitigating It

Lukasz: Good idea on letting struts 2 developers know that instead of implementing the ParameterNameAware interface that they can change the excludeParams value as part of the package setup. So I'll add to my code example:

Re: simplest web program with struts

See the Struts tutorials here: http://struts.apache.org/2.3.4/docs/getting-started.html -- View this message in context: http://struts.1045723.n5.nabble.com/simplest-web-program-with-struts-tp5709961p5709962.html Sent from the Struts - User mailing list archive at Nabble.com. -

Re: Struts2Builder 0.5.0 has been released - now with support for Oracle, Sybase, and MS SQL Server

I'm not a big fan of code generators, but I gave Struts2Builder a try. It worked well generating a complete Struts 2 CRUD web application. I used on Mac OS 10.8.1 and with MySQL. One change I would recommend is that in the dependencies you instruct the user to add to pom.xml I think you've got a

Updated Struts 2 Ant Examples

I updated the Struts 2 basic and hello world Ant examples at http://struts.apache.org/2.3.4.1/docs/getting-started.html to include the latest Struts 2 version and other required jars. I noticed that sometime after version 2.3.3 Struts 2 no longer needs commons-lang 2.X but just needs commons-lan

New Warn Log Messages When Using Struts 2.3.8

I'm reviewing Struts 2.3.8 and noticed that in the log there are new WARN-level messages that were not there in release 2.3.4.1. For example: Dec 28, 2012 2:01:43 PM com.opensymphony.xwork2.util.logging.commons.CommonsLogger warn WARNING: Parameter [personBean.carModels] is not on the excludePar

Re: New Warn Log Messages When Using Struts 2.3.8

Lukasz: Thank you for the reply. I did test with devMode = false and the WARN and ERROR log messages are not written to the log. Since in production we have devMode = false set this isn't a big issue for us. It was just a bit confusing to see those log message during development and I wan

Re: New Warn Log Messages When Using Struts 2.3.8

Lukasz (and anyone else): Please look over this article: http://www.brucephillips.name/blog/index.cfm/2012/12/31/Struts-2-How-To-Exclude-Parameters-From-Being-Processed-By-The-Framework

Re: New Warn Log Messages When Using Struts 2.3.8

I added a tutorial on how to exclude parameters from being processed to https://cwiki.apache.org/confluence/display/WW/Getting+Started Where should I added this information to the Core Developer's Guide at https://cwiki.apache.org/confluence/display/WW/Guides? Could it go somewhere under the C

Re: Actions now require INPUT result after installing struts2-spring plugin

David: We have a Struts - Spring example application at https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples/ I recently tested this example application, which uses Struts 2 version 2.3.15, and did not encounter the issue you report. In the example there is a save action tha

Re: How to Mock getText("customerLabel") method in junit?

You may want to checkout this tutorial and the example code that goes with it: http://struts.apache.org/release/2.3.x/docs/unit-testing.html -- View this message in context: http://struts.1045723.n5.nabble.com/How-to-Mock-getText-customerLabel-method-in-junit-tp5713562p5713597.html Sent f

Re: About S2-019, is it safe to re-enable DMI ?

"If not, how is it possible to not use DMI ? " See - http://struts.apache.org/release/2.3.x/docs/getting-started.html - the tutorial on using Wildcard Method Selection may be helpful. Using the ! (bang) operator and dynamic method invocation is a security problem. See: http://www.brucephillips

Re: About S2-019, is it safe to re-enable DMI ?

"Ok, but i mean how is it possible to not use DMI "with struts convention plugin". We prefer the convention over configuration approch. " I don't believe DMI is required to use the Struts Convention plugin. For example see the annotations tutorial in the Struts 2 examples (the link I sent you ea

Re: [ANNOUNCEMENT] Struts2-JSR303-Validation-Plugin available

I've modified one of my form processing example applications to include this plugin. It is not working as it allows you to not enter a value for first name even though I've annotated it with @Size(min=5). I double-checked that I'm following all the steps you listed in your ReadMe.md file at GitHu

Re: [ANNOUNCEMENT] Struts2-JSR303-Validation-Plugin available

Works now - thank you for the help and for creating a very useful plugin. Would you mind if I wrote an article about how to use this plugin for my blog (http://www.brucephillips.name/blog)? Bruce -- View this message in context: http://struts.1045723.n5.nabble.com/ANNOUNCEMENT-Struts2-JSR30

Re: [ANNOUNCEMENT] Struts2-JSR303-Validation-Plugin available

Umesh: Does the JSR303 Validation Plugin work with Struts 2 XML validation? In my example project the validation plugin is working but the XML validation I have is not being executed. See: http://www.stfm.org/test/jsr303_validation.zip Besides the validation annotations applie

Re: [ANNOUNCEMENT] Struts2-JSR303-Validation-Plugin available

Umesh: Here is the link to the blog entry I wrote: http://www.brucephillips.name/blog/index.cfm/2013/10/29/New-Struts-2-Plugin-For-JSR-303-Bean-Validation Please let me know if I need to make any changes. Thanks again for all the work you put into creating this plugin. Bruce --

Re: 2 files register.jsp in trunk/struts2examples/message_resource

Thank you for letting us know. I deleted the register.jsp that was under src/main/resources... Bruce -- View this message in context: http://struts.1045723.n5.nabble.com/2-files-register-jsp-in-trunk-struts2examples-message-resource-tp5714503p5714510.html Sent from the Struts - User mailing l

Struts 2 Examples Updated

I updated the Struts 2 examples to test using the new release (2.3.15.3). I also fixed those examples that were still using name="expression" for regex XML validation. You can checkout these examples from Subversion at: https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples

Re: Problem with tutorial

Michel: Are you using the tutorial code provided at https://svn.apache.org/repos/asf/struts/sandbox/trunk/struts2examples or are you coding the example yourself? If you are coding the example yourself you may want to compare your code and files to the example code checked out from the subve

Re: Unable to Find FreeMarker Template in Struts 2.3.16.2

John: You may want to use git clone to get our updated Struts 2 example projects: git clone http://git.apache.org/struts-examples.git In the example projects is one for Struts 2 Themes that shows how the customized .ftl files are under src/main/resources (in specific folders) and also the