Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi all, I have a question regarding the patch level of the Dojo plugin shipped with Struts 2.3.x. According to the Apache Struts 2 Documentation (see [1]), Struts 2.3.x ships with Dojo 0.4.3, which is vulnerable to two major security issues (CVE-2010-2276 and CVE-2010-2272, see [2]). Is a Struts

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Lukasz Lenart
2014-10-06 15:42 GMT+02:00 Markus Fischer : > Hi all, > > I have a question regarding the patch level of the Dojo plugin shipped > with Struts 2.3.x. According to the Apache Struts 2 Documentation (see > [1]), Struts 2.3.x ships with Dojo 0.4.3, which is vulnerable to two > major security issues (C

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Dave Newton
I'd add that since the plugin has been deprecated since S2.1 it's unlikely anything was ever done to deal with it. On Mon, Oct 6, 2014 at 10:00 AM, Lukasz Lenart wrote: > 2014-10-06 15:42 GMT+02:00 Markus Fischer : > > Hi all, > > > > I have a question regarding the patch level of the Dojo plugi

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi. >> Is a Struts 2.3.x system using the Dojo plugin vulnerable to [...] >> security issues, or have they been fixed somehow? Am 06.10.2014 um 16:10 schrieb Dave Newton: > I'd add that since the plugin has been deprecated since S2.1 it's unlikely > anything was ever done to deal with it. > > Lu

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Dave Newton
There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I personally tend to do the JS stuff manually, YMMV. Dave On Mon, Oct 6, 2014 at 10:37 AM, Markus Fischer wrote: > Hi. > > >> Is a Struts 2.3.x system using the Dojo plugin vulnerable to [...] > >> securi

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Christoph Nenning
> There's an S2-jQuery plugin, which for simple (and some complex) is a solid > replacement. > > I personally tend to do the JS stuff manually, YMMV. > > Dave > > you can find it here: https://github.com/struts-community-plugins/struts2-jquery regards, Christoph This Email was scanned by

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi. Am 06.10.2014 um 16:43 schrieb Christoph Nenning: >> There's an S2-jQuery plugin, which for simple (and some complex) is a > solid >> replacement. >> >> I personally tend to do the JS stuff manually, YMMV. > you can find it here: > https://github.com/struts-community-plugins/struts2-jquery

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Christoph Nenning
> >> There's an S2-jQuery plugin, which for simple (and some complex) is a > > solid > >> replacement. > >> > >> I personally tend to do the JS stuff manually, YMMV. > > > you can find it here: > > https://github.com/struts-community-plugins/struts2-jquery > > Thank you both for the helpful sug

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread JOSE L MARTINEZ-AVIAL
We use Dojo with Struts 2, but we don't use the plugin. We just use both together, and they work quite nicely. 2014-10-06 11:01 GMT-04:00 Christoph Nenning : > > >> There's an S2-jQuery plugin, which for simple (and some complex) is a > > > > solid > > >> replacement. > > >> > > >> I personally

Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Jean-Claude Dauphin
Hello, I always got the following error when deploying my Strut2 war in Jetty 9.2.3 HTTP ERROR 404 Problem accessing /Web-JISIS3/. Reason: There is no Action mapped for namespace [/] and action name [] associated with context path [/Web-JISIS3]. -- *Powered by

RE: Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Martin Gainty
> Date: Mon, 6 Oct 2014 22:46:30 +0200 > Subject: Any experience deploying Struts2 war webapps in Jetty 9.2.x > From: jc.daup...@gmail.com > To: user@struts.apache.org > > Hello, > > > I always got the following error when deploying my Strut2 war in Jetty 9.2.3 > HTTP ERROR 404 > > Problem a

Re: Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Lukasz Lenart
2014-10-06 22:46 GMT+02:00 Jean-Claude Dauphin : > Hello, > > > I always got the following error when deploying my Strut2 war in Jetty 9.2.3 > HTTP ERROR 404 > > Problem accessing /Web-JISIS3/. Reason: > > There is no Action mapped for namespace [/] and action name [] > associated with context