You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by Roland Huss <Ro...@consol.de> on 2002/01/16 22:45:45 UTC
Question on ActionForm in 1.0.1
Ahoi,
I was away from Struts for some time (real life bite me ;-), so I
probably missed quite a bit from the latest show. Sorry for that.
As I updated to the current 1.0.1 branch, my file upload stuff broke
due to a change in ActionFrom that moved getMultipartRequestHandler()
from public to protected.
The cvs log states:
----------------------------
revision 1.7.2.2
date: 2001/11/21 13:29:31; author: husted; state: Exp; lines: +29 -18
Add ActionServletWrapper and modify ActionForm to address issue #4997 - autopopulation exploit.
This change prevents the Public String properties of ActionServlet from being changed via a query string.
----------------------------
So, my question: What's the canonical way now to obtain the
MultipartRequestHandler (without extending ActionForm) ?
cu....
--
...roland huss
consol.de
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>
Re: Question on ActionForm in 1.0.1
Posted by Ted Husted <hu...@apache.org>.
It's actually suppose to be public, as it is now in the nightly build.
Apparently, I didn't get that change committed back to the 1.0.1 branch,
only the 1.1 branch.
-- Ted Husted, Husted dot Com, Fairport NY USA.
-- Building Java web applications with Struts.
-- Tel +1 585 737-3463.
-- Web http://www.husted.com/struts/
Roland Huss wrote:
>
> Ahoi,
>
> I was away from Struts for some time (real life bite me ;-), so I
> probably missed quite a bit from the latest show. Sorry for that.
>
> As I updated to the current 1.0.1 branch, my file upload stuff broke
> due to a change in ActionFrom that moved getMultipartRequestHandler()
> from public to protected.
>
> The cvs log states:
>
> ----------------------------
> revision 1.7.2.2
> date: 2001/11/21 13:29:31; author: husted; state: Exp; lines: +29 -18
> Add ActionServletWrapper and modify ActionForm to address issue #4997 - autopopulation exploit.
> This change prevents the Public String properties of ActionServlet from being changed via a query string.
> ----------------------------
>
> So, my question: What's the canonical way now to obtain the
> MultipartRequestHandler (without extending ActionForm) ?
>
> cu....
> --
> ...roland huss
> consol.de
>
> --
> To unsubscribe, e-mail: <ma...@jakarta.apache.org>
> For additional commands, e-mail: <ma...@jakarta.apache.org>
--
To unsubscribe, e-mail: <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>