struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Niall Pemberton <niall.pember...@gmail.com>
Subject Re: [VOTE] Confirm the Struts Action Library 1.3.0 release plan
Date Thu, 16 Feb 2006 15:38:21 GMT
On 2/16/06, Frank W. Zammetti <fzlists@omnytex.com> wrote:
> By the way, I didn't catch the DOS hole... can someone point me at the
> appropriate ticket?

http://issues.apache.org/bugzilla/show_bug.cgi?id=38534

If you drop the 1.2 Branch version of upload.jsp into the Struts 1.2.8
version of the examples webapp - you can see it in action:

http://svn.apache.org/viewcvs.cgi/struts/action/branches/STRUTS_1_2_BRANCH/web/examples/upload/

I've patched the 1.2.x branch for this bug, but held off fixing it in
1.3 at Ted's request.

Niall

>
> Frank

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message