[WW-5215] CspInterceptor assumes Session was already created

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 6.0.0
• Fix Version/s: 6.0.3
• Component/s: Core Interceptors
• Assignee: Unassigned
• Reporter: Lukasz Lenart
• Created: 23/Aug/22 18:04
• Updated: 12/Feb/23 14:44
• Resolved: 25/Aug/22 05:32

Description

ERROR DefaultDispatcherErrorHandler Exception occurred during processing request: null 
java.lang.NullPointerException
at com.amazonaws.serverless.proxy.internal.servlet.AwsHttpServletRequest.getSession(AwsHttpServletRequest.java:139)
at javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:270)
at org.apache.struts2.dispatcher.SessionMap.put(SessionMap.java:171)
at org.apache.struts2.interceptor.csp.DefaultCspSettings.associateNonceWithSession(DefaultCspSettings.java:83)
at org.apache.struts2.interceptor.csp.DefaultCspSettings.addCspHeaders(DefaultCspSettings.java:71)
at org.apache.struts2.interceptor.csp.CspInterceptor.beforeResult(CspInterceptor.java:49)
at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:274)

Issue Links

• links to: GitHub Pull Request #590