urls and iterations

2010-10-04 Thread Piotr Kopeć
Hi to everyone I've got table liki this like this show It's about performance After adding url creation and reference to it in table row show The code runs 200-300 ms longer on 20 iterations (debugging on WARN level) Why it's running so slow? What is correc

RE: Freemarker sitemesh decorator does not render struts 2.2.1 action tag

2010-10-04 Thread Derrick Koes
Ah, this appears to be a known issue. Please see WW-3330 at https://issues.apache.org/jira/secure/IssueNavigator.jspa?reset=true&mode=hide&pid=12311041&sorter/order=DESC&sorter/field=priority&resolution=-1&component=12313331 This is a fairly major road block to upgrade. -Original Message-

Re: Best Practices for handling of XSS attacks

2010-10-04 Thread Dave Newton
On Mon, Oct 4, 2010 at 2:53 PM, Pars Man wrote: > Where in the defaultStack would you place such an interceptor from an > architecual point of view? > As long as it's before "params" it probably doesn't matter too much. Dave

Re: Freemarker sitemesh decorator does not render struts 2.2.1 action tag

2010-10-04 Thread Maurizio Cucchiara
You're right I didn't see the executeResult attribute in your action directive. It's look like you find a new bug out. You should add a new issue: https://issues.apache.org/jira/browse/WW Maurizio Cucchiara 2010/10/4 Derrick Koes : > Why does the JSP version behave differently?  I.e. no reference

RE: Best Practices for handling of XSS attacks

2010-10-04 Thread Pars Man
yep, this is what i will do. Where in the defaultStack would you place such an interceptor from an architecual point of view? Pars - Ursprüngliche Mail Von: Dave Newton An: Struts Users Mailing List Gesendet: Montag, den 4. Oktober 2010, 19:59:14 Uhr Betreff: Re: Best Practices for

Re: Best Practices for handling of XSS attacks

2010-10-04 Thread Dave Newton
An interceptor is still a reasonable solution. But not having a form on each page doesn't really seem like a big deal--just escape any request parameters; no form, no parameters, no problem. Dave On Mon, Oct 4, 2010 at 11:55 AM, Pars Man wrote: > I don't want to use HDIV because: > 1. i do not

RE: Freemarker sitemesh decorator does not render struts 2.2.1 action tag

2010-10-04 Thread Derrick Koes
Why does the JSP version behave differently? I.e. no reference to the property is necessary to get the action tag result output. This difference isn't clear anywhere in documentation AFAIK. Also, I want the output of the entire action result. My result may be considerably more complex than a

RE: Best Practices for handling of XSS attacks

2010-10-04 Thread Pars Man
I don't want to use HDIV because: 1. i do not know muc about it (yet) 2. seems to be "heavy weight" - I don't need all of its capabilities But I have the feeling you know more about HDIV. As far as I know HDIV also changes urls, which I also don't want. I just want to make my html forms secure ag

Re: Freemarker sitemesh decorator does not render struts 2.2.1 action tag

2010-10-04 Thread Maurizio Cucchiara
Hi, I think this is the expected result. In fact the follow line: > *<@s.action var="dateAction" name="date" namespace="/" > executeResult="true" />* > > initializes a dateAction reference (var) to the invoked action. If you want to see your date you need to add this row <@s.property value="#dateA

Re: Set JSP timeout in struts 1 app with multipart/form-data form

2010-10-04 Thread Maurizio Cucchiara
Have you tried setting disableUploadTimeout variable on tomcat? 2010/10/4 Oscar : > Well, i'm using Tomcat 6 for development but also i'm going to test in OAS > because that will be the production environment. > > Regards. > > 2010/10/4 Maurizio Cucchiara > >> Hi, >> what application server are y

Re: Set JSP timeout in struts 1 app with multipart/form-data form

2010-10-04 Thread Oscar
Well, i'm using Tomcat 6 for development but also i'm going to test in OAS because that will be the production environment. Regards. 2010/10/4 Maurizio Cucchiara > Hi, > what application server are you using? Did you watch application server > logs? > I think the problem is related with your AS

Re: Set JSP timeout in struts 1 app with multipart/form-data form

2010-10-04 Thread Maurizio Cucchiara
Hi, what application server are you using? Did you watch application server logs? I think the problem is related with your AS. For instance, Tomcat have a disableUploadTimeout variable. Maurizio Cucchiara 2010/10/4 Oscar : > Hi to all, i have a question about a situation that i have in my > app