Uploaded image for project: 'Struts 2'
  1. Struts 2
  2. WW-3075

StrutsPrepareAndExecuteFilter accesses request parameters before setting request encoding

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.1.6
    • 2.1.8
    • Dispatch Filter
    • None
    • Patch

    Description

      In StrutsPrepareAndExecuteFilter.doFilter(), method PrepareOperations.createActionContext() is called before PrepareOperations.setEncodingAndLocale() one. This causes population of value stack with incorrect data. Same problem exists in StrutsPrepareFilter.

      Suggested patch:
      — StrutsPrepareAndExecuteFilter.java Mon Jan 05 20:00:24 2009
      +++ StrutsPrepareAndExecuteFilter.java Sun Apr 05 18:01:18 2009
      @@ -62,9 +62,9 @@
      HttpServletResponse response = (HttpServletResponse) res;

      try {
      + prepare.setEncodingAndLocale(request, response);
      prepare.createActionContext(request, response);
      prepare.assignDispatcherToThread();

      • prepare.setEncodingAndLocale(request, response);
        request = prepare.wrapRequest(request);
        ActionMapping mapping = prepare.findActionMapping(request, response);
        if (mapping == null) {

      — StrutsPrepareFilter.java Mon Jan 05 20:00:24 2009
      +++ StrutsPrepareFilter.java Sun Apr 05 18:01:34 2009
      @@ -56,9 +56,9 @@
      HttpServletResponse response = (HttpServletResponse) res;

      try {
      + prepare.setEncodingAndLocale(request, response);
      prepare.createActionContext(request, response);
      prepare.assignDispatcherToThread();

      • prepare.setEncodingAndLocale(request, response);
        request = prepare.wrapRequest(request);
        prepare.findActionMapping(request, response);

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              trespasserw Roman Shevchenko
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: