Re: deserializable ActionSupport

2009-10-28 Thread Lukasz Lenart
2009/10/28 Musachy Barroso : > The people who made that decision are by now long gone, and I can't > think of any good reason myself. As I know, ActionSupport is a part of XWork (common purpose action framework) that is used by example in WebLogic 8.1 to manage multiple tasks with WorkManager - th

Re: deserializable ActionSupport

2009-10-28 Thread Musachy Barroso
The people who made that decision are by now long gone, and I can't think of any good reason myself. musachy On Wed, Oct 28, 2009 at 7:26 AM, Greg Lindholm wrote: > I believe the short answer is you can ignore this warning.  If really > inclined you could create your own base class that extends

Re: deserializable ActionSupport

2009-10-28 Thread Greg Lindholm
I believe the short answer is you can ignore this warning. If really inclined you could create your own base class that extends from ActionSupport and implements readObject(). It's very common in web frameworks to use Serializable objects for a couple or reasons, such as being able to preserve st

deserializable ActionSupport

2009-10-27 Thread Lee Clemens
Hello, I (my IDE) noticed a warning showing that my Struts 2 Actions (they extend com.opensymphony.xwork2.ActionSupport) may be deserialized, compromising security. The IDE (IntelliJ 8.1) further states that the class may be deserializable as it supports the Serializable interface (ActionSupport