Re: Is Struts 2.3.15.2 affected by the security vulnerability S2-018?

2013-12-15 Thread Lukasz Lenart
2.3.15.2 and 2.3.15.3 address the same issue, but 2.3.15.2 breaks support for action: prefix, that's why we released 2.3.15.3 as well - even if you don't use action: prefix functionality it will be better upgrade to 2.3.15.3 and use the new flag to disable action: prefix which is safer option. Re

Re: /struts2examples/themes and Struts2-3-16

2013-12-15 Thread Lukasz Lenart
Ok, so you see changes in checkboxlist.ftl - I also moved the whole template folder from webapp directory to resources, you must see the change. Also use clean & redeploy in NetBeans - I'm using command line to build and deploy the new war. Regards -- Łukasz + 48 606 323 122 http://www.lenart.or

Re: /struts2examples/themes and Struts2-3-16

2013-12-15 Thread Chris
Hello, Sorry, I didn't find any solution. Struts 2 Themes and Struts 2.3.16 are not working ( Netbeans 7 and Tomcat 7 ) I believe I have to stop my tests. But old version ( Struts2 Themes before 2013-12-13 ) and Struts 2.3.15.3 only are working. The new files checkboxlist.ftl and theme.proper

Re: Theme problem after update to 2.3.16 -- loading parent theme templates?

2013-12-15 Thread Lukasz Lenart
Theme must be accessible via classpath but I think I found the problem and with next version it'd be possible to place it under webapp folder as well. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/12/12 Chris : > Hi, > struts-2.3.16-all.zip 65,6 Mo (only ) > struts-2.3.

Re: validation xmls in a Struts2 application with no Internet connection

2013-12-15 Thread Lukasz Lenart
Hmm... so it must be some small bug, a typo somewhere. Can you register an issue with the stacktrace and explanation that it works with 1.0.2? Thanks -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ 2013/12/15 Yasser Zamani : > I reviewed Struts internally and discovered that in all places

Re: Diagnosing problem loading "theme.properties" on JBoss 7 with Struts 2.3.16

2013-12-15 Thread Lukasz Lenart
Hi, I see the problem, BaseTemplateEngine#getThemeProps(Template template) doesn't use ServletContext to resolve possible paths where theme.properties can be found. The solution is easy - move theme.properties under classpath and the reset can lay where it is right now. The second option is to m

Re: validation xmls in a Struts2 application with no Internet connection

2013-12-15 Thread Yasser Zamani
I reviewed Struts internally and discovered that in all places it uses "1.0.2" instead of "1.0.3". So, I guessed if I rewrite my DOCTYPE to: 1.0.2//EN" "http://struts.apache.org/dtds/xwork-validator-1.0.2.dtd";> it may work. I tried and yeah, it works! (However, it's some was confusing that

Re: validation xmls in a Struts2 application with no Internet connection

2013-12-15 Thread Lukasz Lenart
2013/12/14 Yasser Zamani : > Hi there, > > We have a Struts2 application with some validation XMLs with following > "DOCTYPE": > >1.0.3//EN" "http://struts.apache.org/dtds/xwork-validator-1.0.3.dtd";> > > > When we run this application on a server which has access to > "struts.apache.org",

Re: /struts2examples/themes and Struts2-3-16

2013-12-15 Thread Lukasz Lenart
Hi, I cannot reproduce the problem, everything works as expected with my changes to the themes example - tried with Jetty and Tomcat 7 and JBoss 7.1 - works like charm. Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/