Re: Struts 6.7.0 and xwork2 packages

2025-01-23 Thread Heikki Hyyrö
Thanks Wolfgang, this was the culprit for that particular problem! But well, after disabling annotations, the app started to have other problems. I will write about that as a reply to another more related thread. -Heikki Wolfgang Knauf kirjoitti 20.1.2025 klo 23.12: Hi Heikki, your descrip

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Lukasz Lenart
As Wolfgang mentioned this can be the reason, I recommend reviewing all the security changes [1] as many of them can impact your application. Other problem that can impact your app is allowlist capability [2] [1] https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=293046977#Struts6.x

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Wolfgang Knauf
Hi Heikki, your description sounds like this parameter injection change: https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=293046977#Struts6.x.xto7.x.xmigration-Actionparameterinjection For testing purposes, you might disable this security feature completely: struts.parameters.req

Re: Struts 6.7.0 and xwork2 packages

2025-01-20 Thread Heikki Hyyrö
Dear all, I might(?) have a similar problem. When I upgragded Struts 2 version from 6.3.0.2 to 7.0.0 and replaced xworks2 imports by their struts2 counterparts, one problem is that the application's actions no longer receive parameters from html forms. I suppose this could be caused by an int

Re: Struts 6.7.0 and xwork2 packages

2025-01-09 Thread Lukasz Lenart
śr., 8 sty 2025 o 21:26 Tellis, Wyatt napisał(a): > I recently upgraded my app to 6.7.0 and saw that many classes are deprecated > due to the renaming of the xwork2 packages. I tried changing the imports to > use the org.apache.struts2 equivalents, but my application no longer works. > Everyth

Struts 6.7.0 and xwork2 packages

2025-01-08 Thread Tellis, Wyatt
Hi, I recently upgraded my app to 6.7.0 and saw that many classes are deprecated due to the renaming of the xwork2 packages. I tried changing the imports to use the org.apache.struts2 equivalents, but my application no longer works. Everything compiles correctly, but I get a 404 error when I g