Re: Dealing with an insecure Struts application on Tomcat

2023-10-20 Thread Christopher Schultz
Greg, On 10/20/23 11:52, Greg Huber wrote: Remember seeing this, a maintained version of Struts 1. Might be work a look. https://github.com/weblegacy/struts1 This is interesting. I knew about this one: https://github.com/kawasima/struts1-forever But the weblegacy folks look *serious* about

Re: Dealing with an insecure Struts application on Tomcat

2023-10-20 Thread Greg Huber
Remember seeing this, a maintained version of Struts 1. Might be work a look. https://github.com/weblegacy/struts1 On Thu, 19 Oct 2023 at 17:45, Alan F wrote: > I am looking at security steps to mitigate issues with a 1.x Struts based > app. > > I have recommended the following until an upgrad