Extend CSP (Content Security Policy)

Hi, I want to add frame-ancestors 'self' to the HTTP-Headers provided by Struts7 (using enforce-mode) Unfortunately I do not understand https://struts.apache.org/core-developers/csp-interceptor Neither do I want to replace DefaultCspSettings.class (losing any struts enhancements in future stru

Aw: Issue with Namespace Configuration

Hi Joseph, sorry I can not help with your namespace issues but I would update struts.xml: http://struts.apache.org/dtds/struts-6.0.dtd";> and get rid of xwork-core-2.3.35.jar which is not part of struts 7.0.3 any more. Best regards Ute --

Aw: Re: Sample JSP using Error and Exception Values without exception.message

Lukasz, thank you for updating the documentation. - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org

RE: struts-tag property in javascript

Update after more investigating Nate's answer: Using ${id} threw an error (I suppose my config not fit for JSP EL) Best regards Ute - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail:

Aw: RE: struts-tag property in javascript

Hi and thx for your fast answers. I am aware that migration could go much deeper in cleaning up but rewriting the action und jsp files is fissel work enough at the moment. Dave's answer "But you should be able use standard JSP EL iirc." inspired me. First I did not understand (never used EL), th

struts-tag property in javascript

Hi, migrating from Struts1 I encounter in a jsp the error "Equal symbol expected" at the "onclick" row. I think my old quotes do not work any more with Struts2. Struts1: ';}"/> Struts2: ';}"/> I tried 'id', \"id\", \'id\' "id" but nothing worked out Any advice appreciated (hopefully not

Sample JSP using Error and Exception Values without exception.message

Hi, https://struts.apache.org/core-developers/exception-configuration I tried the "Sample JSP using Error and Exception Values" but was not displayed. Some error in my config, or outdated? Best regards Ute - To unsubscribe,

Aw: Re: Struts7 Allowlist Capability

Lukasz, thank you for your advice. I got rid of almost all by moving logic into the action and passing new flags to jsp instead. e.g. Migrating struts1 by raised WARN [org.apache.struts2.ognl.SecurityMemberAccess] (default task-2) Declaring class [class java.util.ArrayList] of member type [p

Aw: Re: Setting struts.devMode only in struts.xml?

Thank you Lukasz, Great advice and great documentation. I guess I need some search machine on the documentation. I edited struts.xml and added the variable to the Eclipse Wildfly Runtime (Tab Environment), and it works fine. Best regards Ute

Struts7 Allowlist Capability

It is recommended enabling the allowlist capability with struts.allowlist.enable. I added my package names to the struts.allowlist.packageNames. But I get these warnings (leading to further errors) WARN [org.apache.struts2.ognl.SecurityMemberAccess] (default task-2) Declaring class [class java.

Setting struts.devMode only in struts.xml?

I face the issue that I have to change my struts.xml any time I want to deploy from dev environment to test or production environment. Either struts.devMode value=true or false. This might lead to deploying devMode to production by accident. Is there an alternative place to set devMode more flexi

Aw: Re: Aw: File Upload Failure in Struts 7.0.3 Migration - UploadedFilesAware Implementation Issue

success to upload a file to the > server. It is true? > > That’s why I ask for your support. > > I appreciate your assistance. > > Regards > On 10 May 2025 at 2:57:02 AM -0600, Ute Kaiser , wrote: > > Hi, > > > > I tried the same last week for the first t

Aw: RE: Struts 7 problem

list.packageNames' configuration. 14:56:11,308 WARN [org.apache.struts2.ognl.SecurityMemberAccess] (default task-1) Declaring class [class gov.ca.doj.sotas.databean.UserData] of member type [public int gov.ca.doj.sotas.databean.UserData.getPwdDaysToExp()] is not allowlisted! Add to '

Aw: RE: Struts 7 problem

Maybe it helps: I could see: Caused by: java.lang.NoClassDefFoundError: javax/servlet/http/HttpServletRequest Struts7 uses jakarta, not javax Mit freundlichen Grüßen Ute Kaiser Gesendet: Freitag, 9. Mai 2025 um 23:54 Von: "Deborah White" An: "Struts Users Mailing List" B

Aw: Re: Validation problem

Hi, escaping does not matter. Output for error.maxlength=\'{0}\' can not be greater than {1} characters. is the same as for error.maxlength='{0}' can not be greater than {1} characters. (and the same as for error.maxlength={0} can not be greater than {1} characters.) The '' always disappear. I w

Aw: File Upload Failure in Struts 7.0.3 Migration - UploadedFilesAware Implementation Issue

Hi, I tried the same last week for the first time, and here is my experience: 1. WARN [org.apache.struts2.components.File] (default task-5) Struts has detected a file upload UI tag (s:file) being used without a form set to method 'POST'. This is probably an error! I used and it was rendered aut

Re: Struts 7 problem

Securitystruts.apache.orgHi,have you considered this restriction?Probably exceeding max lengthVon meinem iPad gesendetAm 09.05.2025 um 23:25 schrieb Deborah White :That took care of that one. Now I have this:14:23:09,654 ERROR [org.apache.struts2.ognl.OgnlValueStack] (default task-1) Could not eva

Validation problem

Hi, I tried according to https://struts.apache.org/core-developers/validation Customizing validation messages XML This is the example from above: getText('username.field.name') errors.required={0} is required. username.field.name=Username The final output

Re: Strange issue displaying numbers when in Arabic locale

Hi,here the same problem:How to use unsupported Locale in Java 11 and numbers in String.format()stackoverflow.comThere seems to be a solution with the locale extension -u-nu-latnBest regards UteVon meinem iPad gesendetAm 05.04.2025 um 02:22 schrieb Zoran Avtarovski :Hi Guys,We are in the process o

Aw: Re: Struts7 debug-tag with rendering problem

Hi Lukasz, yes, I use Struts 7.0.3 I suppose it is just a missing , that browser usually excuses for html but not for my xml output. Thx and best regards Ute - To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For ad

Struts7: First Action with wrong locale

Hi, I wrote a LocaleInterceptor to catch the language from request URL path, either German or Englisch. Output contains language specific fields from database. Unfortunately, after server restart the first call has always German output. What I learned from debugging: I18nInterceptor.class is fir

Struts7 debug-tag with rendering problem

Hi, using in jsp causes my XML-Output to crash. I thought I needed it because my jsp does not display the expected output and therefore I wanted to inspect the value stack. Any help appreciated to use this tag. Best regards Ute XML-Verarbeitungsfehler: Nicht übereinstimmendes Tag. Erwartet: .

Aw: RE: Struts7: looking for constant to set escapeHtml=false

Thx Lukasz and Nate. I created MypropertyTag.java extending PropertyTag.java with my own method setEscapeHtml but it was not called when the attribute escateHTML was not set in jsp. So I decided to go with Nate and to add the attribute in jsp. Yet, MypropertyTag helped me with another problem:

Struts7: looking for constant to set escapeHtml=false

My application output is XML (not HTML), but German umlaute (ä,ö,ü) are escaped for and let the XML output crash in browser. Is there a way to configure e.g. struts.xml to set escapeHtml=false? (instead of adding it to every single row in every jsp) Part of my application is XML (display data on