struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (WW-5004) No more calling of a static variable in Struts 2.8.20 available
Date Thu, 31 Jan 2019 14:32:00 GMT

    [ https://issues.apache.org/jira/browse/WW-5004?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16757291#comment-16757291
] 

ASF subversion and git services commented on WW-5004:
-----------------------------------------------------

Commit 5524c579d29dbe91fe82428a74fb4cb1888330ba in struts's branch refs/heads/struts-2-5-x
from JCgH4164838Gh792C124B5
[ https://gitbox.apache.org/repos/asf?p=struts.git;h=5524c57 ]

Fix for NPE issue discovered in WW-5004. (#316)

* Fix for NPE issue discovered in WW-5004.
- Guard fix for a NPE that can arise under certain conditions, identified by A. Mashchenko.

* Fix for NPE issue discovered in WW-5004 (amended commit).
- Guard fix for a NPE that can arise under certain conditions, identified by A. Mashchenko.
- Requires the following elements to implement a fuller fix:
  - Back-port relevant guard logic in ProxyUtil from master into 2.5.x to deal with the NPE.
  - Update SecurityMemberAccess to block access to static fields.
  - Upgrade to OGNL 3.1.22 (re-enables access to public static fields w/out access checks).
  - Add unit test to confirm proper functionality of the fix.
  - Correct missing entry in 4 test configuration XML files (needed for new unit test).
- Replaced literal injection parameter name for setStaticFieldAccessLevel in OgnlValueStackFactory
with the appropriate constant.
  Note: Even though a constant was defined in StrutsConstants, the value for the injection
name in all places is the XWorkConstants.
        It has to remain the same to avoid breaking anything.


> No more calling of a static variable in Struts 2.8.20 available
> ---------------------------------------------------------------
>
>                 Key: WW-5004
>                 URL: https://issues.apache.org/jira/browse/WW-5004
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 2.5.20
>         Environment: Java 7.1 and JSP Websites
>            Reporter: Deniz Renkligül
>            Priority: Critical
>              Labels: build, features, patch, usability
>             Fix For: 2.5.21, 2.6
>
>
> After the update from Struts 2.5.18 to 2.5.20 it is not more possible to call a java
static variable in JSP like
> {code:java}
> <s:property value="@my.package.folder.my.staticClass@myStaticThemeVersion" />
> {code}
> Please see for more details the release notes of 2.5.20
>  [link https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20|https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.5.20]
>  and I tried without success the following description assigned above in the release
version notes 2.5.20 with :
> {code:java}
> <constant name="struts.configuration.xml.reload" value="false"/>
> <constant name="struts.serve.static" value="true" />
> {code}
>  https://issues.apache.org/jira/browse/WW-4984
>  
> Thanks in advance for your support.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message