Re: Probable bug in Struts 7.0.0

2025-02-01 Thread Lukasz Lenart
czw., 30 sty 2025 o 18:25 Bibonne Fabrice napisał(a): > > This is done for the issue : https://issues.apache.org/jira/browse/WW-5525 Thanks, I already prepared PR, yet I want to increase code coverage https://github.com/apache/struts/pull/1201 > As a workaround, I registered the instance to be u

RE: Probable bug in Struts 7.0.0

2025-01-30 Thread Bibonne Fabrice
igine- De : Lukasz Lenart Envoyé : mercredi 29 janvier 2025 18:00 À : Struts Users Mailing List Objet : Re: Probable bug in Struts 7.0.0 « Ce courriel provient d’un expéditeur extérieur à l’Insee. Compte tenu du contexte de menace cyber actuel il convient d’être extrêmement vigilan

Re: Probable bug in Struts 7.0.0

2025-01-29 Thread Lukasz Lenart
wt., 28 sty 2025 o 10:39 Bibonne Fabrice napisał(a): > First, thank you very much to all commiters for the new version of Struts > 7.0.0 : it is a great improvement for many apps in my firm. > > I think, there is maybe a bug inside the SecurityMemberAccess : it appears > when an ognl expression

Probable bug in Struts 7.0.0

2025-01-28 Thread Bibonne Fabrice
Hi everybody, First, thank you very much to all commiters for the new version of Struts 7.0.0 : it is a great improvement for many apps in my firm. I think, there is maybe a bug inside the SecurityMemberAccess : it appears when an ognl expression such as `(new com.mycompany.MyClass()).method()`