Re: Struts2 documentation and Stack Overflow

2016-08-31 Thread Doug Erickson
Stack Overflow Documentation isn't meant to duplicate existing documentation. It's intended to provide missing documentation and compensate for poor documentation. So, copying current documentation to SO is definitely not in line with their goals. It *could *be a place to create better documentat

Confusion on Security Bulletin fix versions

2016-04-26 Thread Doug Erickson
On the Struts home page, it says, "We have released two older versions of Apache Struts which *contain the latest security fixes.* Please read announcement for* 2.3.20.3* ..." Those notes say, "This release addresses *two* potential security vulnerabilities," and then lists three issues, S2-029, S

Re: synchronization problem

2016-04-09 Thread Doug Erickson
The code you've shown won't allow simultaneous executions of the DAO method. Either you've left some important details out of the sample, or you have other code accessing the DAO. This has nothing to do with Struts. The synchronization is implemented in lower layers. > On Apr 9, 2016, at 8:11

OGNL upgrade in 2.3.28 breaks expressions

2016-04-06 Thread Doug Erickson
It appears that a change in OGNL 3.0.13 with 2.3.28 breaks expressions that reference properties beginning with at least two capital letters. Previously, a getter like "getXXX()" could be referenced with OGNL "xXX", but these must be changed to "XXX". Is this expected behavior? It's a breaking cha