This is an automated email from the ASF dual-hosted git repository.
amashchenko pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git.
from 14c4c52 Excludes Jenkinsfile from license check
new 925eb62 Fix for access issue for 2.6 discovered in WW-5004 (2nd
amended commit): - Restored ability to access public static fields (true by
default). - Introduced a boolean configuration flag (allowStaticFieldAccess). -
Replaced one remaining Boolean.parseBoolean() conversion in OgnlUtil use
BooleanUtils.toBoolean(). - Enhanced unit tests to confirm proper operation of
the fix. - Replicating L. Lenart's change in PR#317: - Removed injection
parameter for setAllowStaticMethodAc [...]
new 64bd12b Fix for access issue for 2.6 discovered in WW-5004 (Minor
update to previous commit): - Restored ability to access public static fields
(true by default). - Introduced a boolean configuration flag
(allowStaticFieldAccess). - Replaced one remaining Boolean.parseBoolean()
conversion in OgnlUtil use BooleanUtils.toBoolean(). - Enhanced unit tests to
confirm proper operation of the fix. - Replicating L. Lenart's change in
PR#317: - Removed injection parameter for setAllowS [...]
new efd5a7c Merge pull request #320 from
JCgH4164838Gh792C124B5/localS2_26x_B2
The 5613 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../providers/XWorkConfigurationProvider.java | 1 +
.../com/opensymphony/xwork2/ognl/OgnlUtil.java | 10 +-
.../opensymphony/xwork2/ognl/OgnlValueStack.java | 19 +--
.../xwork2/ognl/OgnlValueStackFactory.java | 32 +++-
.../xwork2/ognl/SecurityMemberAccess.java | 69 +++++++--
.../java/org/apache/struts2/StrutsConstants.java | 3 +
.../interceptor/ParametersInterceptorTest.java | 2 +-
.../com/opensymphony/xwork2/ognl/OgnlUtilTest.java | 166 ++++++++++++++++++++-
.../xwork2/ognl/OgnlValueStackTest.java | 10 +-
.../xwork2/ognl/SecurityMemberAccessProxyTest.java | 4 +-
.../xwork2/ognl/SecurityMemberAccessTest.java | 154 +++++++++++++++----
.../xwork2/ognl/SetPropertiesTest.java | 2 +-
.../struts2/result/ServletRedirectResultTest.java | 2 +-
.../util/SecurityMemberAccessInServletsTest.java | 4 +-
...-false.xml => xwork-test-staticfield-false.xml} | 1 +
...e-false.xml => xwork-test-staticfield-true.xml} | 1 +
16 files changed, 404 insertions(+), 76 deletions(-)
copy
core/src/test/resources/com/opensymphony/xwork2/config/providers/{xwork-test-allowstatic-devmode-false.xml
=> xwork-test-staticfield-false.xml} (98%)
copy
core/src/test/resources/com/opensymphony/xwork2/config/providers/{xwork-test-allowstatic-devmode-false.xml
=> xwork-test-staticfield-true.xml} (98%)
