RE: [TEST] Apache Struts 6.7.2 test build is ready

I am unable to obtain a token during the form upload process. Specifically, I have tried the following.

・I submitted a form from the browser with "enctype" set to "multipart/form-data" and used "struts.token.name" as the token name in the request.
・When executing "getTokenName()" from "TokenHelper" in the "struts2-core-6.7.2.jar" on the application side, it returns null.
・Upon debugging, I found that "!params.contains("struts.token.name")" in "TokenHelper.getTokenName()" indicates that the relevant token is not included in the "params". It seems that the exclusion patterns added to "DefaultExcludedPatterns" may be affecting this.
・When the "enctype" is set to "application/x-www-form-urlencoded", I am able to retrieve the token.

As part of upgrading to version 6.7.2, are there any necessary adjustments that need to be made on the application side?

On 2025/02/04 06:59:20 Lukasz Lenart wrote:
> Hello,
> 
> This is a patch release of Struts 6.x.x which contains only 
> non-breaking changes. Please take the time and test the bits - any 
> help is appreciated. Please report any problems you will spot.
> 
> Here are the changes from the previous version:
> https://github.com/apache/struts/releases/tag/STRUTS_6_7_2
> 
> Staging Maven repo
> https://repository.apache.org/content/groups/staging/
> 
> Standalone artifacts
> https://dist.apache.org/repos/dist/dev/struts/6.7.2/
> 
> Release notes
> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.7.2
> 
> 
> Kind regards
> --
> Łukasz
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected] For 
> additional commands, e-mail: [email protected]
> 
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]