This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a change to branch feature/WW-5504-request-nonce in repository https://gitbox.apache.org/repos/asf/struts.git
discard f4c581dda WW-5504 Deprecates nonce related methods discard 471e4e721 WW-5504 Allows to use request instead of session attribute to store nonce add 688162cae WW-5501 Only exclude malicious file names add cba0db0b0 Merge pull request #1181 from apache/fix/WW-5501-exclude add a33c162f5 WW-5512 Extends the container to support injecting optional parameters into constructor add 2ba8d97ad WW-5512 Supports mixing required and optional parameters add 3c1e44ca2 WW-5512 Supports mixing required and optional parameters in any order add 7e4791985 Merge pull request #1175 from apache/feature/WW-5512-optional-inject add 5713a74ed Fixes nightlies builds add 9153228b6 Merge pull request #1192 from apache/fix/nightlies-67x add 32071c71a WW-5516 Fix TemplateDir and Theme fallback to Request/Session/Application attributes add 6a6270f62 Merge pull request #1190 from apache/WW-5516-fix-temp-theme-fallback add 2fc4a822a Simplifies Jenkinsfile to build Struts 6.x add 59dc9301e Merge pull request #1194 from apache/fix/jenkinsfile-67x add 6de93e77d Defines proper snapshot version add 959b2182b Merge pull request #1195 from apache/fix/proper-version add 67ba458d0 Defines proper snapshot version for BOM add 4a8ddbb27 Merge pull request #1202 from apache/fix/bom-version add 3227d5929 [maven-release-plugin] prepare release STRUTS_6_7_1 add 07603b959 [maven-release-plugin] prepare for next development iteration add c36eafa37 WW-5516 Fix AttributeMap NPE when PageContext has no request add c0dd8dd80 Merge pull request #1210 from apache/WW-5516-attrmap-npe-67 add 2135ebf65 WW-5501 Ignores DMI related action field (#1211) add 5038a9209 [maven-release-plugin] prepare release STRUTS_6_7_2 add 7a77c7a82 [maven-release-plugin] prepare for next development iteration add fe3dd6ba9 WW-5528 Ensure multipart upload illegal characters reported as error add 58f37babb Merge pull request #1215 from apache/WW-5528-multipart-illegal-char-errors-67 add 9b044377a WW-5501 Reverts all changes related to WW-5501 (#1218) add 583b174fe WW-5525 Fix NPE in ProxyUtil for SecurityMemberAccess originating static members add d35ec15c7 WW-5525 Fixes NPE when checking if expressions is acceptable add ef90b3ba3 Merge pull request #1220 from apache/WW-5525-proxyutil-npe-67 add 1fe822cca WW-5529 Drops unused misleading setter setMaxLength in favour of setMaxlength (#1221) (#1222) add 7909f4323 [maven-release-plugin] prepare release STRUTS_6_7_3 add 87e322dbe [maven-release-plugin] prepare for next development iteration add fe5b19773 WW-5531 Enforce JRE8 compatibility (when compiled on JDK9+) add a4e9902d9 Merge pull request #1225 from apache/WW-5531-jre8-compat add 91c931417 WW-5529 Adds autogenerated files with updated desc add c45664a33 Merge pull request #1226 from apache/fix/WW-5529-maxlength-s6 add 8fb9aba74 [maven-release-plugin] prepare release STRUTS_6_7_4 add ca4e07cea [maven-release-plugin] prepare for next development iteration add 0f61944d6 WW-5544 Marks ReflectionContextFactory as deprecated and uses ActionContext instead (#1254) add 84a51cce0 WW-5546 Fixes NPE when uploaded file is empty (#1262) add 831568929 Cleans up all uploaded files add 036c4ddb7 Merge pull request #1306 from apache/fix/clean-uploaded-files add 6ebdd87ee WW-5504 Allows to use request instead of session attribute to store nonce add 7927a9231 WW-5504 Deprecates nonce related methods This update added new revisions after undoing existing revisions. That is to say, some revisions that were in the old version of the branch are not in the new version. This situation occurs when a user --force pushes a change and generates a repository containing something like this: * -- * -- B -- O -- O -- O (f4c581dda) \ N -- N -- N refs/heads/feature/WW-5504-request-nonce (7927a9231) You should already have received notification emails for all of the O revisions, and so the following emails describe only the N revisions from the common base, B. Any revisions marked "omit" are not gone; other references still refer to them. Any revisions marked "discard" are gone forever. No new revisions were added by this update. Summary of changes: .github/workflows/codeql.yml | 33 ++-- .gitignore | 11 +- CLAUDE.md | 160 ++++++++++++++++++ Jenkinsfile | 65 ++------ apps/pom.xml | 2 +- apps/rest-showcase/pom.xml | 4 +- apps/showcase/pom.xml | 2 +- assembly/pom.xml | 2 +- bom/pom.xml | 6 +- bundles/admin/pom.xml | 2 +- bundles/demo/pom.xml | 2 +- bundles/pom.xml | 2 +- core/pom.xml | 2 +- .../opensymphony/xwork2/inject/ContainerImpl.java | 54 +++++- .../xwork2/ognl/OgnlReflectionContextFactory.java | 4 + .../xwork2/ognl/SecurityMemberAccess.java | 5 +- .../com/opensymphony/xwork2/util/ProxyUtil.java | 3 +- .../util/reflection/ReflectionContextFactory.java | 4 + .../org/apache/struts2/components/TextField.java | 22 +-- .../java/org/apache/struts2/components/UIBean.java | 36 +++- .../apache/struts2/dispatcher/AttributeMap.java | 2 +- .../multipart/AbstractMultiPartRequest.java | 23 +-- .../multipart/JakartaMultiPartRequest.java | 59 ++++--- .../multipart/JakartaStreamMultiPartRequest.java | 14 +- .../interceptor/AbstractFileUploadInterceptor.java | 2 +- .../org/apache/struts2/views/jsp/TagUtils.java | 6 +- .../site/resources/tags/combobox-attributes.html | 8 - .../site/resources/tags/password-attributes.html | 8 - .../site/resources/tags/textfield-attributes.html | 8 - .../xwork2/inject/ContainerImplTest.java | 142 +++++++++++++--- .../xwork2/ognl/OgnlValueStackTest.java | 28 ++++ .../apache/struts2/components/UIBeanTagTest.java | 88 ++++++++++ .../struts2/dispatcher/AttributeMapTest.java | 24 ++- .../multipart/JakartaMultiPartRequestTest.java | 183 +++++++++++++++++++++ .../ActionFileUploadInterceptorTest.java | 132 +++++++-------- .../interceptor/FileUploadInterceptorTest.java | 130 +++++++-------- plugins/async/pom.xml | 2 +- plugins/bean-validation/pom.xml | 2 +- plugins/cdi/pom.xml | 2 +- plugins/config-browser/pom.xml | 2 +- .../config_browser/ShowValidatorAction.java | 16 +- plugins/convention/pom.xml | 2 +- plugins/dwr/pom.xml | 2 +- plugins/embeddedjsp/pom.xml | 2 +- plugins/gxp/pom.xml | 2 +- plugins/jasperreports/pom.xml | 2 +- plugins/javatemplates/pom.xml | 2 +- plugins/jfreechart/pom.xml | 2 +- plugins/json/pom.xml | 2 +- plugins/junit/pom.xml | 2 +- plugins/osgi/pom.xml | 2 +- plugins/oval/pom.xml | 2 +- plugins/pell-multipart/pom.xml | 2 +- plugins/plexus/pom.xml | 2 +- plugins/pom.xml | 2 +- plugins/portlet-junit/pom.xml | 2 +- plugins/portlet-mocks/pom.xml | 2 +- plugins/portlet-tiles/pom.xml | 2 +- plugins/portlet/pom.xml | 2 +- plugins/rest/pom.xml | 2 +- plugins/sitemesh/pom.xml | 2 +- plugins/spring/pom.xml | 2 +- .../xwork2/ognl/SecurityMemberAccessProxyTest.java | 88 ++++++++++ .../xwork2/spring/SpringProxyUtilTest.java | 2 + plugins/testng/pom.xml | 2 +- plugins/tiles/pom.xml | 2 +- plugins/velocity/pom.xml | 2 +- plugins/xslt/pom.xml | 2 +- pom.xml | 13 +- 69 files changed, 1061 insertions(+), 394 deletions(-) create mode 100644 CLAUDE.md create mode 100644 core/src/test/java/org/apache/struts2/components/UIBeanTagTest.java create mode 100644 core/src/test/java/org/apache/struts2/dispatcher/multipart/JakartaMultiPartRequestTest.java