Re: Struts 2.2.1 Problem

2010-09-23 Thread Lukasz Lenart
Maybe it's related to that http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html I've added some more restrictive rules regarding request's parameters names. Lot of special characters are disallowed, take a look on line 138 http://svn.apache.org/viewvc/struts/struts2/trunk/xwork-core/s

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dale Newfield
On 9/22/10 1:58 PM, Michelle Weeks wrote: And is that form submitted with GET or POST? Are any characters encoded in that submission? Are you certain that the pagesMap map isn't having .put("name%2fname", "keyValue") called on it? -Dale

RE: Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
[mailto:davelnew...@gmail.com] Sent: Wednesday, September 22, 2010 11:10 AM To: Struts Users Mailing List Subject: Re: Struts 2.2.1 Problem On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks wrote: > I guess I'm not sure what exactly you are asking ... > When the error happens: the original messag

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dale Newfield
On 9/22/10 11:56 AM, Michelle Weeks wrote: If one key has a special character the whole Map is not set into the action. I'm guessing it's an encoding issue. Are these strings encoded in the resulting html? If the parameters are part of the URL (GET request) then they'll probably wind up enc

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dave Newton
On Wed, Sep 22, 2010 at 11:56 AM, Michelle Weeks wrote: > I guess I'm not sure what exactly you are asking ... > When the error happens: the original message just said you had a map that set wasn't called on when you had key values containing certain characters--on its own, it's not really enoug

RE: Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
Sent: Wednesday, September 22, 2010 10:21 AM To: Struts Users Mailing List Subject: Re: Struts 2.2.1 Problem Under what circumstances? On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks wrote: > I have just started using Struts 2.2.1, and I have found a bug ... I > have several Hash Maps with a

Re: Struts 2.2.1 Problem

2010-09-22 Thread Dave Newton
Under what circumstances? On Wed, Sep 22, 2010 at 11:20 AM, Michelle Weeks wrote: > I have just started using Struts 2.2.1, and I have found a bug ... I > have several Hash Maps with a String for the key value. These key > values sometimes contain special characters, including '-, /, \, _' any

Struts 2.2.1 Problem

2010-09-22 Thread Michelle Weeks
I have just started using Struts 2.2.1, and I have found a bug ... I have several Hash Maps with a String for the key value. These key values sometimes contain special characters, including '-, /, \, _' any Map with a key value containing one of these characters seems to silently fail to call the