Uploaded image for project: 'Struts 2'
  1. Struts 2
  2. WW-2893

XWorkConverter calling e.printStackTrace() after bad user input

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.1.2
    • 2.1.3
    • None
    • None
    • Tomcat 6.0.18

    Description

      We are getting log output triggered by bad user input from the XWorkConverter#convertValue method - lines 302, 315, 326 in 2.1.2. This can be triggered by having a numeric field and not submitting anything in it, or having a custom converter that throws a TypeConversionException.

      We would have difficulty going into production with bad user input triggering a stack dump in our log files - the frequency of bad input coupled with the computation cost of generating a stack trace, and the log file spam it would generate. Could these printStackTrace() calls please be removed. Perhaps replaced with debug level output.

      IMO having application log output being generated by end-user activity is a problem.

      Attachments

        Activity

          People

            musachy Musachy Barroso
            lucasn Lucas Nelson
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: