Re: Getting Value from Id in a LIst

2014-05-01 Thread Antonio Sánchez
Sorry, maybe I'm not expressing my question accurately. I understand this is NOT the right approach for implementing this specific case, but I'm using it as an example to ask for that OGNL expression. Finally, I believe I have found it (it works for me): Given PersonAction: publ

Re: [ANN][SECURITY] Struts 1 - CVE-2014-0114 -Mitigation Advice Available, Possible RCE Impact

2014-05-01 Thread Emi Lu
Thank you very much ! Patched struts1 projects based on [2] successfully. On 05/01/2014 02:59 PM, Rene Gielen wrote: As confirmed in our last announcement, the Apache Struts 1 framework in all versions is affected by a ClassLoader manipulation vulnerability (CVE-2014-0114) similar to a recently

Re: [ANN][SECURITY] Struts 1 - CVE-2014-0114 -Mitigation Advice Available, Possible RCE Impact

2014-05-01 Thread Eric Reed
Rene, Thank you for your insight and advice. I have successfully secured 5 production applications with proof of concept before and after and have re-deployed these critical applications in under 4 hours with very little down time. Best Regards, Eric >>> Rene Gielen 5/1/2014 2:59 PM >>> As c

Re: Getting Value from Id in a LIst

2014-05-01 Thread Dave Newton
It's not the syntax that's an issue, it's how you're implementing your data transfer. There's no "syntax" for retrieving a persisted object by ID beyond what OGNL's expression language (EL) provides. You can call arbitrary methods. The problem with doing that on the view layer on a row basis is t

Re: Getting Value from Id in a LIst

2014-05-01 Thread Antonio Sánchez
Yes, that the obvious way. Thank you. But guess there is some situation where the view needs asking to the controller for some data passing some parameter. Although the example is not the best one, suppose PersonAction has Map get Countries(), which is called in prepare(). Is there any syntax

[ANN][SECURITY] Struts 1 - CVE-2014-0114 -Mitigation Advice Available, Possible RCE Impact

2014-05-01 Thread Rene Gielen
As confirmed in our last announcement, the Apache Struts 1 framework in all versions is affected by a ClassLoader manipulation vulnerability (CVE-2014-0114) similar to a recently fixed vulnerability in Struts 2 (CVE-2014-0112, CVE-2014-0094) [1]. Thanks to the efforts of Alvaro Munoz and the HP Fo

Unable to Find FreeMarker Template in Struts 2.3.16.2

2014-05-01 Thread John Boyer
Hello: I've upgraded from Struts 2.3.4.1 to Struts 2.3.16.2. I've been using the KUTheme to render a vertical checkbox list as outlined in 2.2x docs at http://goo.gl/vHqXBH. However, now the framework is unable to find KUTheme template in Struts 2.3.16.2. It's located in default location at `t

Re: Getting Value from Id in a LIst

2014-05-01 Thread Dave Newton
If you only have an ID then you need to join the Country model; this seems obvious. You should do all that on the Java side to avoid the N+1 issue. Dave On Thu, May 1, 2014 at 10:58 AM, Antonio Sánchez wrote: > Hello. > > Person CRUD. > > Person bean has name, age... and "countryId". Country

Getting Value from Id in a LIst

2014-05-01 Thread Antonio Sánchez
Hello. Person CRUD. Person bean has name, age... and "countryId". Country bean has countryId and countryName. In persons.jsp all persons are listed, displaying rows for each person, and columns for name, age... but countryName must be displayed instead of countryId: I can display countr