Fwd: [ANN] Struts 2.3.14.1 GA (fast track | security)

2013-05-23 Thread J. Garcia
FYI -- Forwarded message -- From: Lukasz Lenart Date: Thu, May 23, 2013 at 9:00 AM Subject: [ANN] Struts 2.3.14.1 GA (fast track | security) To: Struts Users Mailing List The Apache Struts group is pleased to announce that Struts 2.3.14.1 is available as a "General Availability

Fwd: [appfuse-dev] [ANN] AppFuse 2.2.1 Released!

2012-12-12 Thread J. Garcia
FYI: AppFuse 2.2.1 released. You can choose among a number of web frameworks, one of them being Struts2 in its latest release version. Cheers, J. -- Forwarded message -- From: Matt Raible Date: Tue, Dec 11, 2012 at 11:24 PM Subject: [appfuse-dev] [ANN] AppFuse 2.2.1 Released! To:

Re: Struts2 String ThreadSafe?

2012-11-30 Thread J. Garcia
This is definitely wrong. You can mix data from two different concurrent sessions! On Thu, Nov 29, 2012 at 4:42 PM, Rohit Gupta wrote: > So given the fact that my beans are not prototype, there is a chance that > the same action class may be used for two consecutive requests. > > Regards, > >

release date for new version?

2012-11-19 Thread J. Garcia
Will version 2.3.7 be released any time soon? https://issues.apache.org/jira/browse/WW/fixforversion/12323448 Cheers, J.

Re: 回复:[struts2] 's method attribute doesn't work

2012-11-19 Thread J. Garcia
Good! On Sun, Nov 18, 2012 at 10:39 PM, Lukasz Lenart wrote: > 2012/11/14 J. Garcia : > > Beware of this vulnerability: > > > > > http://www.brucephillips.name/blog/index.cfm/2011/2/19/Struts-2-Security-Vulnerability--Dynamic-Method-Invocation > > I've adde

Re: 回复:[struts2] 's method attribute doesn't work

2012-11-14 Thread J. Garcia
Beware of this vulnerability: http://www.brucephillips.name/blog/index.cfm/2011/2/19/Struts-2-Security-Vulnerability--Dynamic-Method-Invocation Cheers, J. On Tue, Nov 13, 2012 at 4:41 PM, Wu Ming wrote: > Hi, > > Never mind, I had found the solution: you have to set > "struts.enable.DynamicMe

Re: quick WebApp start

2012-11-11 Thread J. Garcia
+1 for AppFuse. Try the SNAPSHOT version. It features bootstrap-style UI and other goodies. J. On Sun, Nov 11, 2012 at 11:55 AM, Maurizio Cucchiara wrote: > AFAIU AppFuse should be the right choice for your use case. > Did you try write on AppFuse ML in order to solve your issues? > > AFAIK t

Re: getText in error messages: resource bundle or bean value?

2012-10-19 Thread J. Garcia
field value "1234". getText is then trying to locate an entry for "1234" > and cannot find one so it is just return "1234". > > It might work if you try ${getText('user.password')}. Otherwise, you may > need to rename it. > > -Origi

Re: getText in error messages: resource bundle or bean value?

2012-10-19 Thread J. Garcia
o have the same value as the ${getText("user.password")} field. Solved! On Fri, Oct 19, 2012 at 2:10 PM, J. Garcia wrote: > Hi, > I'm having a problem with getText(). >

getText in error messages: resource bundle or bean value?

2012-10-19 Thread J. Garcia
sword field. However, when the error message is shown, instead of the text from the resource bundle, what is shown are the actual values of the bean, like this: The abcd field has to have the same value as the 1234 field. Is this a bug in getText()? Cheers, J. Garcia

additional params for tags in JSP

2012-10-13 Thread J. Garcia
corresponding freemarker template? Cheers, J. Garcia

Re: Getting following exception while trying validation mechanism in struts2

2012-08-07 Thread J. Garcia
For date formatting, a converter is not considered a good practice. Date/number formatting should be done following this guide: http://struts.apache.org/2.3.4/docs/formatting-dates-and-numbers.html A jira related to this is already fixed and hopefully will soon be availabe as release: https://is

Re: PreffixMapper for language

2012-07-10 Thread J. Garcia
Does not sound bad. Just try it. Another option worth trying-out is urlrewrite: http://tuckey.org/urlrewrite/ With urlrewrite filter, you could set locale and forward to /mypackage/myaction. Saludos, J. On Mon, Jul 9, 2012 at 9:27 PM, JOSE L MARTINEZ-AVIAL wrote: > Last try: > Hello, > I have

Re: Struts CRUD generator

2012-07-06 Thread J. Garcia
This is the one that generates crud app from database, as posted here weeks ago: http://struts2builder.sourceforge.net J. On Fri, Jul 6, 2012 at 6:42 PM, Oscar Alvarez wrote: > Take a look at AppFuse. > > http://appfuse.org/display/APF/Home > > 2012/7/5 Mitch Claborn > > > I thought I saw a r

Re: data injection attack

2012-07-04 Thread J. Garcia
for which methods can be called - this not only would prevent > url parameters being set but also prevent restricted fields of any object > being updated. > > Marcus. > > > > -Original Message- > From: J. Garcia [mailto:jogaco...@gmail.com] > Sent: 04 July 201

Re: data injection attack

2012-07-04 Thread J. Garcia
ty, typos, and top-quoting; on cell) > On Jul 4, 2012 8:49 AM, "J. Garcia" wrote: > > > My action would have: > > > > public void setMyBean( MyBean myBean) {...} > > > > and I would like to avoid an injection on myBean.field3. This field could > >

Re: data injection attack

2012-07-04 Thread J. Garcia
My action would have: public void setMyBean( MyBean myBean) {...} and I would like to avoid an injection on myBean.field3. This field could be the owner id for instance! On Wed, Jul 4, 2012 at 3:34 PM, Łukasz Lenart wrote: > Another way is to use AnnotationParameterFilterIntereptor (name > cont

data injection attack

2012-07-04 Thread J. Garcia
An interesting article that I found: http://websec.wordpress.com/2012/01/04/multiple-vulnerabilities-in-apache-struts2-and-property-oriented-programming-with-java/ In struts2 it is pretty easy to set attribute values of any bean field when a form is posted, even if the field is not in the form. F

Re: Struts2 : formatting and entering doubles consistently through the whole application not depending on locale

2012-06-19 Thread J. Garcia
According to the Java formatting api, the French locale for integers would look something like this: 345 987,246 http://docs.oracle.com/javase/tutorial/i18n/format/numberFormat.html As I have been working on integer l10n, I have tested this, and if I set French locale and enter an integer like t

Re: simplest web program with struts

2012-06-11 Thread J. Garcia
Maven archetypes are a good starting point as well. http://struts.apache.org/2.3.4/docs/struts-2-maven-archetypes.html You may want to have a look at AppFuse Java RAD. It has several frameworks to choose from, among them struts2: appfuse.org. J. On Sun, Jun 10, 2012 at 11:38 PM, bphill...@ku.ed

Re: Struts 2 losing timestamp in java.util.Date when validation failed

2012-06-11 Thread J. Garcia
Sorry, my mistake. Done: https://issues.apache.org/jira/browse/WW-3841 On Mon, Jun 11, 2012 at 9:41 AM, J. Garcia wrote: > Done: > https://issues.apache.org/jira/browse/WW-3833 > > > > On Mon, Jun 11, 2012 at 9:32 AM, Łukasz Lenart < > lukasz.len...@googlemail.c

Re: Struts 2 losing timestamp in java.util.Date when validation failed

2012-06-11 Thread J. Garcia
ference - Confitura http://confitura.pl/ > > 2012/6/11 J. Garcia : > > A full example based on struts2 blank archetype attached. > > Run with maven2: mvn jetty:run > > Url: http://localhost:8080/struts-test/example/Login > > > > Enter as year of birth a bad intege

Re: Struts 2 losing timestamp in java.util.Date when validation failed

2012-06-08 Thread J. Garcia
mation, if there is no > validation error...? > > > > -----Original Message- > From: "J. Garcia" [jogaco...@gmail.com] > Date: 06/07/2012 12:21 PM > To: "Struts Users Mailing List" > Subject: Re: Struts 2 losing timestamp in java.util.Dat

Re: Struts 2 losing timestamp in java.util.Date when validation failed

2012-06-07 Thread J. Garcia
Try using date formatting like this: J. On Wed, Jun 6, 2012 at 11:08 PM, s wrote: > Here's an JSPs, action class and struts.xml > > http://localhost:8080/Sample/student_edit.action calls form/jsp > studentDetails. > > Erase name and submit form, this will result in validation being fail

Re: conversion error repopulation not working

2012-05-31 Thread J. Garcia
This works nicely. Thanks! Cheers, J. On Thu, May 31, 2012 at 3:07 PM, Łukasz Lenart wrote: > Can be reduced to this: > > public String getFormatted(String key, String fieldName, List args) { > if (getFieldErrors().isEmpty()) { > return getText(key, args); > } else { >

Re: Action inheritance and value automatic injection failure

2012-05-29 Thread J. Garcia
I guess you're using Spring. If you use Spring injection via an xml file, you must use inheritance: Cheers, J. On Tue, May 29, 2012 at 2:31 PM, Dionis Argiri wrote: > Hi! > > I'm using struts 2.3.3. And I have marked following problem. When I have > so

Re: conversion error repopulation not working

2012-05-29 Thread J. Garcia
Integer. On Mon, May 28, 2012 at 10:04 AM, Łukasz Lenart < lukasz.len...@googlemail.com> wrote: > Is it int either Integer ? > > > Regards > -- > Łukasz > mobile +48 606 323 122 http://www.lenart.org.pl/ > Warszawa JUG conference - Confitura http://confitura.pl/ >

Re: conversion error repopulation not working

2012-05-25 Thread J. Garcia
Thanks Lukasz for your reply. While preparing a minimal example, I got the reason of it all. The real situation is: - The input form has an int field - The value already available should be formatted and localized: 43,000 / 43.000 - In order to achive l10n, the input field tag is like this:

conversion error repopulation not working

2012-05-23 Thread J. Garcia
Hi, In order to implement a good user experience, I am trying to put into practice the conversion validator, as documented here: http://struts.apache.org/2.3.3/docs/conversion-validator.html The ideal would be: a form with one integer field. If the user enters a non valid integer, the value rema

Re: Does the StrutsTestCase test filters defined in web.xml?

2012-05-15 Thread J. Garcia
I recommend you use canoo webtest. This is not a unit test tool, but integration test tool. This is the tool used for instance in AppFuse. It has specific pdf verification steps. Cheers, J. On Mon, May 14, 2012 at 5:33 PM, Miguel Almeida wrote: > Hi Steve, > > On Mon, 2012-05-14 at 11:09 +0100,