April 2011 - seam-commits - Jboss List Archives

[seam/rest] f07710: removed unnecessary files

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/rest Commit: f07710236f02f2d628409fe6a6b5e9dd1043ca8a https://github.com/seam/rest/commit/f07710236f02f2d628409fe6a6b5e9dd1043ca8a Author: Jozef Hartinger <jharting(a)redhat.com> Date: 2011-04-05 (Tue, 05 Apr 2011) Changed paths: R impl/src/test/resources/arquillian.xml R impl/src/test/resources/jndi.properties Log Message: ----------- removed unnecessary files

13 years, 2 months

1
0
0 / 0

[seam/rest] cc058c: SEAMREST-41

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/rest Commit: cc058c80d64e09cc1fd1a1e08d90755c1063a535 https://github.com/seam/rest/commit/cc058c80d64e09cc1fd1a1e08d90755c1063a535 Author: Jozef Hartinger <jharting(a)redhat.com> Date: 2011-04-05 (Tue, 05 Apr 2011) Changed paths: M impl/src/main/java/org/jboss/seam/rest/exceptions/ResponseBuilderProducer.java Log Message: ----------- SEAMREST-41

13 years, 2 months

1
0
0 / 0

[seam/forge] e0f8d6: https://issues.jboss.org/browse/SEAMFORGE-100

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/forge Commit: e0f8d60f6960606922151e3fa423b44938442e54 https://github.com/seam/forge/commit/e0f8d60f6960606922151e3fa423b4493844... Author: Paul Bakker <paul.bakker.nl(a)gmail.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/PersistencePlugin.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/api/PersistenceProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/EclipseLinkProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/HibernateProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/OpenJPAProvider.java Log Message: ----------- https://issues.jboss.org/browse/SEAMFORGE-100 Provider dependencies are now added to the pom file Commit: 63d6a9a0a9ff84205c974de890a89e641690deb6 https://github.com/seam/forge/commit/63d6a9a0a9ff84205c974de890a89e641690... Author: Lincoln Baxter, III <lincolnbaxter(a)gmail.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/PersistencePlugin.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/api/PersistenceProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/EclipseLinkProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/HibernateProvider.java M j2ee-plugins/src/main/java/org/jboss/seam/forge/spec/jpa/provider/OpenJPAProvider.java Log Message: ----------- Updated JPA plugins to use DependencyResolver Compare: https://github.com/seam/forge/compare/c0348c2...63d6a9a

13 years, 2 months

1
0
0 / 0

Seam SVN: r14072 - branches/enterprise.

by seam-commits＠lists.jboss.org

Author: manaRH Date: 2011-04-05 10:47:22 -0400 (Tue, 05 Apr 2011) New Revision: 14072 Added: branches/enterprise/JBPAPP_4_3_CP09_JBPAPP-6234/ Log: new branch for JBPAPP-6234 one-off patch

13 years, 2 months

1
0
0 / 0

Seam SVN: r14071 - in branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam: core and 1 other directories.

by seam-commits＠lists.jboss.org

Author: manaRH Date: 2011-04-05 10:39:05 -0400 (Tue, 05 Apr 2011) New Revision: 14071 Added: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/blacklist.properties Modified: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/core/Expressions.java branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/navigation/Pages.java Log: JBPAPP-6233 Added: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/blacklist.properties =================================================================== --- branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/blacklist.properties (rev 0) +++ branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/blacklist.properties 2011-04-05 14:39:05 UTC (rev 14071) @@ -0,0 +1,4 @@ +.getClass() +.addRole( +.getPassword( +.removeRole( \ No newline at end of file Modified: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/core/Expressions.java =================================================================== --- branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/core/Expressions.java 2011-04-05 10:54:54 UTC (rev 14070) +++ branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/core/Expressions.java 2011-04-05 14:39:05 UTC (rev 14071) @@ -3,7 +3,13 @@ import static org.jboss.seam.annotations.Install.BUILT_IN; +import java.io.BufferedReader; +import java.io.IOException; +import java.io.InputStream; +import java.io.InputStreamReader; import java.io.Serializable; +import java.util.ArrayList; +import java.util.List; import javax.el.ELContext; import javax.el.ExpressionFactory; @@ -17,6 +23,8 @@ import org.jboss.seam.contexts.Contexts; import org.jboss.seam.el.EL; import org.jboss.seam.el.SeamExpressionFactory; +import org.jboss.seam.log.LogProvider; +import org.jboss.seam.log.Logging; /** * Factory for EL method and value expressions. @@ -31,7 +39,41 @@ @Name("org.jboss.seam.core.expressions") public class Expressions implements Serializable { + private static final LogProvider log = Logging.getLogProvider(Expressions.class); + private static List<String> blacklist = new ArrayList<String>(); + // loading blacklisted patterns of non-valid EL expressions + static + { + BufferedReader reader = null; + try + { + InputStream blacklistIS = ResourceLoader.instance().getResourceAsStream("blacklist.properties"); + reader = new BufferedReader(new InputStreamReader(blacklistIS)); + String line; + while ((line = reader.readLine()) != null) + { + blacklist.add(line); + } + } + catch (IOException e) + { + log.warn("Black list of non-valid EL expressions was not found!"); + } + finally + { + if (reader != null) + { + try + { + reader.close(); + } + catch (IOException e) { } + } + } + + } + /** * Get the JBoss EL ExpressionFactory */ @@ -76,7 +118,7 @@ */ public <T> ValueExpression<T> createValueExpression(final String expression, final Class<T> type) { - + checkELExpression(expression); return new ValueExpression<T>() { private javax.el.ValueExpression facesValueExpression; @@ -140,6 +182,8 @@ */ public <T> MethodExpression<T> createMethodExpression(final String expression, final Class<T> type, final Class... argTypes) { + checkELExpression(expression); + return new MethodExpression<T>() { private javax.el.MethodExpression facesMethodExpression; @@ -257,4 +301,21 @@ return (Expressions) Component.getInstance(Expressions.class, ScopeType.APPLICATION); } } + + private static void checkELExpression(final String expression) + { + for (int index = 0; blacklist.size() > index; index++) + { + if ( expression.contains(blacklist.get(index)) ) { + throw new IllegalArgumentException("This EL expression is not allowed!"); + } + } + + // for any case blacklist is not provided this is definitely not permitted + if ( expression.contains(".getClass()") ) + { + throw new IllegalArgumentException("This EL expression is not allowed!"); + } + } + } Modified: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/navigation/Pages.java =================================================================== --- branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/navigation/Pages.java 2011-04-05 10:54:54 UTC (rev 14070) +++ branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/src/main/org/jboss/seam/navigation/Pages.java 2011-04-05 14:39:05 UTC (rev 14071) @@ -696,6 +696,10 @@ .getRequestParameterMap().get("actionMethod"); if (actionId!=null) { + String decodedActionId = URLDecoder.decode(actionId); + if (decodedActionId != null && (decodedActionId.indexOf('#') >= 0 || decodedActionId.indexOf('{') >= 0) ){ + throw new IllegalArgumentException("EL expressions are not allowed in actionMethod parameter"); + } if ( !SafeActions.instance().isActionSafe(actionId) ) return result; String expression = SafeActions.toAction(actionId); result = true;

13 years, 2 months

1
0
0 / 0

Seam SVN: r14070 - branches/enterprise.

by seam-commits＠lists.jboss.org

Author: manaRH Date: 2011-04-05 06:54:54 -0400 (Tue, 05 Apr 2011) New Revision: 14070 Added: branches/enterprise/JBPAPP_5_1_0_JBPAPP-6233/ Removed: branches/enterprise/JBPAPP_5_1_0-ELEXPR/ Log:

13 years, 2 months

1
0
0 / 0

[seam/security] 18679e: functional test for openid-rp example

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/security Commit: 18679ee9d95c7e214d6da22ac4be13f6288a7497 https://github.com/seam/security/commit/18679ee9d95c7e214d6da22ac4be13f62... Author: mgencur(a)redhat.com <mgencur(a)redhat.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M examples/openid-rp/pom.xml A examples/openid-rp/src/test/java/org/jboss/seam/security/examples/openidrp/ftest/OpenIdRpTest.java A examples/openid-rp/src/test/resources/ftest.properties A examples/openid-rp/src/test/resources/ftests.xml A examples/readme.txt Log Message: ----------- functional test for openid-rp example Commit: c949c3db7ac80672439cd6beacf2d1b41e63b0ec https://github.com/seam/security/commit/c949c3db7ac80672439cd6beacf2d1b41... Author: mgencur(a)redhat.com <mgencur(a)redhat.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M examples/idmconsole/pom.xml A examples/idmconsole/src/test/java/org/jboss/seam/security/examples/idmconsole/ftest/IdmConsoleTest.java A examples/idmconsole/src/test/resources/ftests.xml Log Message: ----------- functional test for idmconsole example Compare: https://github.com/seam/security/compare/daca6b8...c949c3d

13 years, 2 months

1
0
0 / 0

[seam/forge] f565fa: https://issues.jboss.org/browse/SEAMFORGE-99

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/forge Commit: f565faf704c5bab53d170c3bcb5eb5b1581da96d https://github.com/seam/forge/commit/f565faf704c5bab53d170c3bcb5eb5b1581d... Author: Paul Bakker <paul.bakker.nl(a)gmail.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M parser-java-api/src/main/java/org/jboss/seam/forge/parser/java/Method.java M parser-java/src/main/java/org/jboss/seam/forge/parser/java/impl/MethodImpl.java Log Message: ----------- https://issues.jboss.org/browse/SEAMFORGE-99 Added setStatic method. Commit: 4572358a710342f9a3c603a324e6560d22ff17b0 https://github.com/seam/forge/commit/4572358a710342f9a3c603a324e6560d22ff... Author: Lincoln Baxter, III <lincolnbaxter(a)gmail.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M parser-java-api/src/main/java/org/jboss/seam/forge/parser/java/Member.java M parser-java-api/src/main/java/org/jboss/seam/forge/parser/java/Method.java M parser-java/src/main/java/org/jboss/seam/forge/parser/java/impl/FieldImpl.java M parser-java/src/main/java/org/jboss/seam/forge/parser/java/impl/MethodImpl.java Log Message: ----------- SEAMFORGE-100 Extended to include fields, also added inspectors. Compare: https://github.com/seam/forge/compare/0daa6fd...4572358

13 years, 2 months

1
0
0 / 0

[seam/forge] 0daa6f: mvn plugin now usable from any resource within a p...

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/forge Commit: 0daa6fd055dddcbfac78f7666acd59e2905634bf https://github.com/seam/forge/commit/0daa6fd055dddcbfac78f7666acd59e29056... Author: Lincoln Baxter, III <lincolnbaxter(a)gmail.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M dev-plugins/src/main/java/org/jboss/seam/forge/dev/mvn/MvnShellPlugin.java M docs/reference/src/main/docbook/en-US/forge-creating-basic-webapp.xml Log Message: ----------- mvn plugin now usable from any resource within a project

13 years, 2 months

1
0
0 / 0

[seam/rest] 93bc88: SEAMREST-42

by noreply＠github.com

Branch: refs/heads/master Home: https://github.com/seam/rest Commit: 93bc88ccd638bc80f85b54ded936e1b80fe4a696 https://github.com/seam/rest/commit/93bc88ccd638bc80f85b54ded936e1b80fe4a696 Author: Jozef Hartinger <jharting(a)redhat.com> Date: 2011-04-04 (Mon, 04 Apr 2011) Changed paths: M docs/reference/src/main/docbook/en-US/rest-dependencies.xml M docs/reference/src/main/docbook/en-US/rest-installation.xml M docs/reference/src/main/docbook/en-US/version_info.xml Log Message: ----------- SEAMREST-42

13 years, 2 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

seam-commits April 2011