(struts-examples) 01/01: Adjusts config to be compatible with Struts 7 stronger security

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch fix/permission
in repository https://gitbox.apache.org/repos/asf/struts-examples.git

commit 90b7e6f8de37f59c2869b8f88d4afc9325db10b8
Author: Lukasz Lenart 
AuthorDate: Thu Mar 6 11:02:13 2025 +0100

Adjusts config to be compatible with Struts 7 stronger security
---
 .../org/apache/struts/edit/action/EditAction.java  | 85 ++
 control-tags/src/main/resources/struts.xml |  1 +
 2 files changed, 41 insertions(+), 45 deletions(-)

diff --git 
a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java 
b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
index 1e527b7..ef6f46c 100755
--- a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
+++ b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
@@ -5,6 +5,7 @@ import org.apache.struts.edit.model.State;
 import org.apache.struts.edit.service.EditService;
 import org.apache.struts.edit.service.EditServiceInMemory;
 import org.apache.struts2.ActionSupport;
+import org.apache.struts2.interceptor.parameter.StrutsParameter;
 
 import java.util.ArrayList;
 import java.util.Arrays;
@@ -18,61 +19,55 @@ import java.util.List;
  */
 public class EditAction extends ActionSupport {
 
-   private static final long serialVersionUID = 1L;
+private EditService editService = new EditServiceInMemory();
 
-   private EditService editService = new EditServiceInMemory();
+private Person personBean;
+private String[] sports = {"football", "baseball", "basketball"};
+private String[] genders = {"male", "female", "not sure"};
+private List states;
+private String[] carModelsAvailable = {"Ford", "Chrysler", "Toyota", 
"Nissan"};
 
-   private Person personBean;
-   private String [] sports = {"football", "baseball", "basketball" };
-   private String [] genders = {"male", "female", "not sure" };
-   private List states ;
-   private String [] carModelsAvailable = 
{"Ford","Chrysler","Toyota","Nissan"};
+public String save() throws Exception {
+editService.savePerson(getPersonBean());
 
-   public String save() throws Exception {
-   editService.savePerson( getPersonBean() );
+return SUCCESS;
+}
 
-   return SUCCESS;
-   }
+public String input() throws Exception {
+setPersonBean(editService.getPerson());
 
-   public String input() throws Exception {
-   setPersonBean( editService.getPerson() );
+return INPUT;
+}
 
-   return INPUT;
-   }
+@StrutsParameter(depth = 2)
+public Person getPersonBean() {
+return personBean;
+}
 
-   public Person getPersonBean() {
-   return personBean;
-   }
+public void setPersonBean(Person person) {
+personBean = person;
+}
 
-   public void setPersonBean(Person person) {
-   personBean = person;
-   }
+public List getSports() {
+return Arrays.asList(sports);
+}
 
-   public List getSports() {
-   return Arrays.asList(sports);
-   }
+public List getGenders() {
+return Arrays.asList(genders);
+}
 
-   public List getGenders() {
-   return Arrays.asList(genders);
-   }
+public List getStates() {
+states = new ArrayList<>();
+states.add(new State("AZ", "Arizona"));
+states.add(new State("CA", "California"));
+states.add(new State("FL", "Florida"));
+states.add(new State("KS", "Kansas"));
+states.add(new State("NY", "New York"));
 
+return states;
+}
 
-
-   public List getStates() {
-
-   states = new ArrayList<>();
-   states.add( new State("AZ", "Arizona") );
-   states.add( new State("CA", "California") );
-   states.add( new State("FL", "Florida") );
-   states.add( new State("KS", "Kansas") );
-   states.add( new State("NY", "New York") );
-
-   return states;
-   }
-
-
-
-   public String [] getCarModelsAvailable() {
-   return carModelsAvailable;
-   }
+public String[] getCarModelsAvailable() {
+return carModelsAvailable;
+}
 }
diff --git a/control-tags/src/main/resources/struts.xml 
b/control-tags/src/main/resources/struts.xml
index 750b70f..3473cb6 100755
--- a/control-tags/src/main/resources/struts.xml
+++ b/control-tags/src/main/resources/struts.xml
@@ -6,6 +6,7 @@
 
 
 
+
 
 
 



(struts-examples) 01/01: Adjusts config to be compatible with Struts 7 stronger security

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch fix/permission
in repository https://gitbox.apache.org/repos/asf/struts-examples.git

commit 572c5202bfa0563c63ce346c67f92cbdf54ebd84
Author: Lukasz Lenart 
AuthorDate: Thu Mar 6 11:02:13 2025 +0100

Adjusts config to be compatible with Struts 7 stronger security
---
 .../org/apache/struts/edit/action/EditAction.java  |  90 +++---
 .../java/org/apache/struts/edit/model/Person.java  | 134 ++---
 .../java/org/apache/struts/edit/model/State.java   |  58 -
 .../apache/struts/edit/service/EditService.java|   4 +-
 .../struts/edit/service/EditServiceInMemory.java   |  67 +--
 control-tags/src/main/resources/struts.xml |   1 +
 6 files changed, 166 insertions(+), 188 deletions(-)

diff --git 
a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java 
b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
index 1e527b7..c3235a0 100755
--- a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
+++ b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
@@ -5,74 +5,66 @@ import org.apache.struts.edit.model.State;
 import org.apache.struts.edit.service.EditService;
 import org.apache.struts.edit.service.EditServiceInMemory;
 import org.apache.struts2.ActionSupport;
+import org.apache.struts2.interceptor.parameter.StrutsParameter;
 
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.List;
 
 /**
- * Acts as a controller to handle actions
- * related to editing a Person.
- * @author bruce phillips
- *
+ * Acts as a controller to handle actions related to editing a Person.
  */
 public class EditAction extends ActionSupport {
 
-   private static final long serialVersionUID = 1L;
+private EditService editService = new EditServiceInMemory();
 
-   private EditService editService = new EditServiceInMemory();
+private Person personBean;
+private String[] sports = {"football", "baseball", "basketball"};
+private String[] genders = {"male", "female", "not sure"};
+private List states;
+private String[] carModelsAvailable = {"Ford", "Chrysler", "Toyota", 
"Nissan"};
 
-   private Person personBean;
-   private String [] sports = {"football", "baseball", "basketball" };
-   private String [] genders = {"male", "female", "not sure" };
-   private List states ;
-   private String [] carModelsAvailable = 
{"Ford","Chrysler","Toyota","Nissan"};
+public String save() throws Exception {
+editService.savePerson(getPersonBean());
 
-   public String save() throws Exception {
-   editService.savePerson( getPersonBean() );
+return SUCCESS;
+}
 
-   return SUCCESS;
-   }
+public String input() throws Exception {
+setPersonBean(editService.getPerson());
 
-   public String input() throws Exception {
-   setPersonBean( editService.getPerson() );
+return INPUT;
+}
 
-   return INPUT;
-   }
+@StrutsParameter(depth = 2)
+public Person getPersonBean() {
+return personBean;
+}
 
-   public Person getPersonBean() {
-   return personBean;
-   }
+public void setPersonBean(Person person) {
+personBean = person;
+}
 
-   public void setPersonBean(Person person) {
-   personBean = person;
-   }
+public List getSports() {
+return Arrays.asList(sports);
+}
 
-   public List getSports() {
-   return Arrays.asList(sports);
-   }
+public List getGenders() {
+return Arrays.asList(genders);
+}
 
-   public List getGenders() {
-   return Arrays.asList(genders);
-   }
+public List getStates() {
+states = new ArrayList<>();
+states.add(new State("AZ", "Arizona"));
+states.add(new State("CA", "California"));
+states.add(new State("FL", "Florida"));
+states.add(new State("KS", "Kansas"));
+states.add(new State("NY", "New York"));
 
+return states;
+}
 
-
-   public List getStates() {
-
-   states = new ArrayList<>();
-   states.add( new State("AZ", "Arizona") );
-   states.add( new State("CA", "California") );
-   states.add( new State("FL", "Florida") );
-   states.add( new State("KS", "Kansas") );
-   states.add( new State("NY", "New York") );
-
-   return states;
-   }
-
-
-
-   public String [] getCarModelsAvailable() {
-   return carModelsAvailable;
-   }
+public String[] getCarModelsAvailable() {
+return carModelsAvailable;
+}
 }
diff --git 
a/control-tags/src/main/java/org/apache/struts/edit/model/Person.java 
b/control-tags/src/main/java/org/apache/struts/edit/model/Person.java
index ec80aaf..3bc12e7 100755

(struts-examples) branch fix/permission updated (90b7e6f -> 572c520)

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch fix/permission
in repository https://gitbox.apache.org/repos/asf/struts-examples.git


 discard 90b7e6f  Adjusts config to be compatible with Struts 7 stronger 
security
 new 572c520  Adjusts config to be compatible with Struts 7 stronger 
security

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (90b7e6f)
\
 N -- N -- N   refs/heads/fix/permission (572c520)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../org/apache/struts/edit/action/EditAction.java  |   5 +-
 .../java/org/apache/struts/edit/model/Person.java  | 134 ++---
 .../java/org/apache/struts/edit/model/State.java   |  58 -
 .../apache/struts/edit/service/EditService.java|   4 +-
 .../struts/edit/service/EditServiceInMemory.java   |  67 +--
 5 files changed, 125 insertions(+), 143 deletions(-)



(struts-examples) branch main updated: Adjusts config to be compatible with Struts 7 stronger security (#426)

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/struts-examples.git


The following commit(s) were added to refs/heads/main by this push:
 new 57c91cd  Adjusts config to be compatible with Struts 7 stronger 
security (#426)
57c91cd is described below

commit 57c91cd157083296df7f4fb05a3d0e32f2885273
Author: Lukasz Lenart 
AuthorDate: Thu Mar 6 11:04:34 2025 +0100

Adjusts config to be compatible with Struts 7 stronger security (#426)
---
 .../org/apache/struts/edit/action/EditAction.java  |  90 +++---
 .../java/org/apache/struts/edit/model/Person.java  | 134 ++---
 .../java/org/apache/struts/edit/model/State.java   |  58 -
 .../apache/struts/edit/service/EditService.java|   4 +-
 .../struts/edit/service/EditServiceInMemory.java   |  67 +--
 control-tags/src/main/resources/struts.xml |   1 +
 6 files changed, 166 insertions(+), 188 deletions(-)

diff --git 
a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java 
b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
index 1e527b7..c3235a0 100755
--- a/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
+++ b/control-tags/src/main/java/org/apache/struts/edit/action/EditAction.java
@@ -5,74 +5,66 @@ import org.apache.struts.edit.model.State;
 import org.apache.struts.edit.service.EditService;
 import org.apache.struts.edit.service.EditServiceInMemory;
 import org.apache.struts2.ActionSupport;
+import org.apache.struts2.interceptor.parameter.StrutsParameter;
 
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.List;
 
 /**
- * Acts as a controller to handle actions
- * related to editing a Person.
- * @author bruce phillips
- *
+ * Acts as a controller to handle actions related to editing a Person.
  */
 public class EditAction extends ActionSupport {
 
-   private static final long serialVersionUID = 1L;
+private EditService editService = new EditServiceInMemory();
 
-   private EditService editService = new EditServiceInMemory();
+private Person personBean;
+private String[] sports = {"football", "baseball", "basketball"};
+private String[] genders = {"male", "female", "not sure"};
+private List states;
+private String[] carModelsAvailable = {"Ford", "Chrysler", "Toyota", 
"Nissan"};
 
-   private Person personBean;
-   private String [] sports = {"football", "baseball", "basketball" };
-   private String [] genders = {"male", "female", "not sure" };
-   private List states ;
-   private String [] carModelsAvailable = 
{"Ford","Chrysler","Toyota","Nissan"};
+public String save() throws Exception {
+editService.savePerson(getPersonBean());
 
-   public String save() throws Exception {
-   editService.savePerson( getPersonBean() );
+return SUCCESS;
+}
 
-   return SUCCESS;
-   }
+public String input() throws Exception {
+setPersonBean(editService.getPerson());
 
-   public String input() throws Exception {
-   setPersonBean( editService.getPerson() );
+return INPUT;
+}
 
-   return INPUT;
-   }
+@StrutsParameter(depth = 2)
+public Person getPersonBean() {
+return personBean;
+}
 
-   public Person getPersonBean() {
-   return personBean;
-   }
+public void setPersonBean(Person person) {
+personBean = person;
+}
 
-   public void setPersonBean(Person person) {
-   personBean = person;
-   }
+public List getSports() {
+return Arrays.asList(sports);
+}
 
-   public List getSports() {
-   return Arrays.asList(sports);
-   }
+public List getGenders() {
+return Arrays.asList(genders);
+}
 
-   public List getGenders() {
-   return Arrays.asList(genders);
-   }
+public List getStates() {
+states = new ArrayList<>();
+states.add(new State("AZ", "Arizona"));
+states.add(new State("CA", "California"));
+states.add(new State("FL", "Florida"));
+states.add(new State("KS", "Kansas"));
+states.add(new State("NY", "New York"));
 
+return states;
+}
 
-
-   public List getStates() {
-
-   states = new ArrayList<>();
-   states.add( new State("AZ", "Arizona") );
-   states.add( new State("CA", "California") );
-   states.add( new State("FL", "Florida") );
-   states.add( new State("KS", "Kansas") );
-   states.add( new State("NY", "New York") );
-
-   return states;
-   }
-
-
-
-   public String [] getCarModelsAvailable() {
-   return carModelsAvailable;
-   }
+public String[] getCarModelsAvailable() {
+return carModelsAvailable;
+}
 

(struts-examples) branch fix/permission deleted (was 572c520)

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch fix/permission
in repository https://gitbox.apache.org/repos/asf/struts-examples.git


 was 572c520  Adjusts config to be compatible with Struts 7 stronger 
security

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.



(struts-examples) branch fix/permission created (now 90b7e6f)

2025-03-06 Thread lukaszlenart
This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a change to branch fix/permission
in repository https://gitbox.apache.org/repos/asf/struts-examples.git


  at 90b7e6f  Adjusts config to be compatible with Struts 7 stronger 
security

This branch includes the following new commits:

 new 90b7e6f  Adjusts config to be compatible with Struts 7 stronger 
security

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.




(struts) branch WW-5534-model-driven-struts-param updated (59e6baade -> 87e75ac15)

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a change to branch WW-5534-model-driven-struts-param
in repository https://gitbox.apache.org/repos/asf/struts.git


omit 59e6baade WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting
 add 87e75ac15 WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (59e6baade)
\
 N -- N -- N   refs/heads/WW-5534-model-driven-struts-param 
(87e75ac15)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .../apache/struts2/interceptor/ModelDrivenInterceptorTest.java | 10 +-
 1 file changed, 9 insertions(+), 1 deletion(-)



(struts) branch WW-5534-model-driven-struts-param created (now 59e6baade)

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a change to branch WW-5534-model-driven-struts-param
in repository https://gitbox.apache.org/repos/asf/struts.git


  at 59e6baade WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting

This branch includes the following new commits:

 new 59e6baade WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.




(struts) 01/01: WW-5534 Proper fix ModelDriven parameter injection and allowlisting

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a commit to branch WW-5534-model-driven-struts-param
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 59e6baade0ec6ded5e0f42d7633b041578df20cf
Author: Kusal Kithul-Godage 
AuthorDate: Thu Mar 6 23:50:44 2025 +1100

WW-5534 Proper fix ModelDriven parameter injection and allowlisting
---
 .../apache/struts2/showcase/ModelDrivenTest.java   | 63 ++
 .../main/java/org/apache/struts2/ModelDriven.java  |  3 --
 .../java/org/apache/struts2/components/Debug.java  | 13 ++---
 .../struts2/components/IteratorComponent.java  |  6 +--
 .../interceptor/ExceptionMappingInterceptor.java   |  6 +--
 .../interceptor/ModelDrivenInterceptor.java| 15 --
 .../debugging/DebuggingInterceptor.java|  7 +--
 .../parameter/ParametersInterceptor.java   | 19 +++
 .../org/apache/struts2/ognl/ThreadAllowlist.java   | 11 
 .../parameter/StrutsParameterAnnotationTest.java   | 10 ++--
 10 files changed, 111 insertions(+), 42 deletions(-)

diff --git 
a/apps/showcase/src/test/java/it/org/apache/struts2/showcase/ModelDrivenTest.java
 
b/apps/showcase/src/test/java/it/org/apache/struts2/showcase/ModelDrivenTest.java
new file mode 100644
index 0..b3656fc7c
--- /dev/null
+++ 
b/apps/showcase/src/test/java/it/org/apache/struts2/showcase/ModelDrivenTest.java
@@ -0,0 +1,63 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *  http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+package it.org.apache.struts2.showcase;
+
+import org.htmlunit.WebClient;
+import org.htmlunit.html.HtmlForm;
+import org.htmlunit.html.HtmlPage;
+import org.htmlunit.html.HtmlSubmitInput;
+import org.junit.After;
+import org.junit.Before;
+import org.junit.Test;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+public class ModelDrivenTest {
+
+private WebClient webClient;
+
+@Before
+public void setUp() throws Exception {
+webClient = new WebClient();
+}
+
+@After
+public void tearDown() throws Exception {
+webClient.close();
+}
+
+@Test
+public void submit() throws Exception {
+HtmlPage page = webClient.getPage(ParameterUtils.getBaseUrl() + 
"/modelDriven/modelDriven.action");
+HtmlForm form = page.getForms().get(0);
+
+form.getInputByName("name").setValue("Johannes");
+form.getInputByName("age").setValue("21");
+form.getInputByName("bustedBefore").setChecked(true);
+form.getTextAreaByName("description").setText("Deals bugs");
+
+HtmlSubmitInput button = form.getInputByValue("Submit");
+page = button.click();
+
+
assertThat(page.getElementById("name").asNormalizedText()).isEqualTo("Johannes");
+
assertThat(page.getElementById("age").asNormalizedText()).isEqualTo("21");
+
assertThat(page.getElementById("bustedBefore").asNormalizedText()).isEqualTo("true");
+
assertThat(page.getElementById("description").asNormalizedText()).isEqualTo("Deals
 bugs");
+}
+}
diff --git a/core/src/main/java/org/apache/struts2/ModelDriven.java 
b/core/src/main/java/org/apache/struts2/ModelDriven.java
index 993a6f5eb..dd21eb2f7 100644
--- a/core/src/main/java/org/apache/struts2/ModelDriven.java
+++ b/core/src/main/java/org/apache/struts2/ModelDriven.java
@@ -18,8 +18,6 @@
  */
 package org.apache.struts2;
 
-import org.apache.struts2.interceptor.parameter.StrutsParameter;
-
 /**
  * ModelDriven Actions provide a model object to be pushed onto the ValueStack
  * in addition to the Action itself, allowing a FormBean type approach like 
Struts.
@@ -36,7 +34,6 @@ public interface ModelDriven {
  *
  * @return the model
  */
-@StrutsParameter(depth = Integer.MAX_VALUE)
 T getModel();
 
 }
diff --git a/core/src/main/java/org/apache/struts2/components/Debug.java 
b/core/src/main/java/org/apache/struts2/components/Debug.java
index 702f9e32b..65c210fa0 100644
--- a/core/src/main/java/org/apache/struts2/components/Debug.java
+++ b/core/src/main/java/org/apache/struts2/components/Debug.java
@@ -18,18 +18,17 @@
  */
 package org.apache.struts2.components;
 
-import org.apache.commons.lang3.ClassUtils;
+import org.apache.struts2.StrutsException;

(struts) branch WW-5534-model-driven-struts-param updated (87e75ac15 -> 96f838df1)

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a change to branch WW-5534-model-driven-struts-param
in repository https://gitbox.apache.org/repos/asf/struts.git


 discard 87e75ac15 WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting
 add 96f838df1 WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting

This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version.  This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:

 * -- * -- B -- O -- O -- O   (87e75ac15)
\
 N -- N -- N   refs/heads/WW-5534-model-driven-struts-param 
(96f838df1)

You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.

Any revisions marked "omit" are not gone; other references still
refer to them.  Any revisions marked "discard" are gone forever.

No new revisions were added by this update.

Summary of changes:
 .../java/org/apache/struts2/interceptor/ModelDrivenInterceptorTest.java  | 1 -
 1 file changed, 1 deletion(-)



(struts) branch main updated (7ae52ccfc -> d47143c68)

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/struts.git


from 7ae52ccfc Bump org.eclipse.transformer:transformer-maven-plugin (#1216)
 add 96f838df1 WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting
 new d47143c68 Merge pull request #1243 from 
apache/WW-5534-model-driven-struts-param

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 .../{ConventionTest.java => ModelDrivenTest.java}  | 49 ++
 .../main/java/org/apache/struts2/ModelDriven.java  |  3 --
 .../java/org/apache/struts2/components/Debug.java  | 13 +++---
 .../struts2/components/IteratorComponent.java  |  6 +--
 .../interceptor/ExceptionMappingInterceptor.java   |  6 +--
 .../interceptor/ModelDrivenInterceptor.java| 15 +--
 .../debugging/DebuggingInterceptor.java|  7 +---
 .../parameter/ParametersInterceptor.java   | 19 -
 .../org/apache/struts2/ognl/ThreadAllowlist.java   | 11 +
 .../interceptor/ModelDrivenInterceptorTest.java|  9 +++-
 .../parameter/StrutsParameterAnnotationTest.java   | 10 ++---
 11 files changed, 68 insertions(+), 80 deletions(-)
 copy 
apps/showcase/src/test/java/it/org/apache/struts2/showcase/{ConventionTest.java 
=> ModelDrivenTest.java} (50%)



(struts) 01/01: Merge pull request #1243 from apache/WW-5534-model-driven-struts-param

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/struts.git

commit d47143c689c1a483c755597fc6e9d1769c50aad5
Merge: 7ae52ccfc 96f838df1
Author: Kusal Kithul-Godage 
AuthorDate: Fri Mar 7 01:14:15 2025 +1100

Merge pull request #1243 from apache/WW-5534-model-driven-struts-param

 .../apache/struts2/showcase/ModelDrivenTest.java   | 63 ++
 .../main/java/org/apache/struts2/ModelDriven.java  |  3 --
 .../java/org/apache/struts2/components/Debug.java  | 13 ++---
 .../struts2/components/IteratorComponent.java  |  6 +--
 .../interceptor/ExceptionMappingInterceptor.java   |  6 +--
 .../interceptor/ModelDrivenInterceptor.java| 15 --
 .../debugging/DebuggingInterceptor.java|  7 +--
 .../parameter/ParametersInterceptor.java   | 19 +++
 .../org/apache/struts2/ognl/ThreadAllowlist.java   | 11 
 .../interceptor/ModelDrivenInterceptorTest.java|  9 +++-
 .../parameter/StrutsParameterAnnotationTest.java   | 10 ++--
 11 files changed, 119 insertions(+), 43 deletions(-)



(struts) branch WW-5534-model-driven-struts-param deleted (was 96f838df1)

2025-03-06 Thread kusal
This is an automated email from the ASF dual-hosted git repository.

kusal pushed a change to branch WW-5534-model-driven-struts-param
in repository https://gitbox.apache.org/repos/asf/struts.git


 was 96f838df1 WW-5534 Proper fix ModelDriven parameter injection and 
allowlisting

The revisions that were on this branch are still contained in
other references; therefore, this change does not discard any commits
from the repository.