Details
-
Type:
Bug
-
Status:
Open
-
Priority:
Major
-
Resolution: Unresolved
-
Affects Version/s: Release 1.5.1
-
Fix Version/s: None
-
Component/s: ActionBean Dispatching, Tag Library
-
Labels:None
Description
When using <s:useActionBean var="xy" beanclass="..."> without a specified event on a wizard class, the DefaultActionBeanPropertyBinder is throwing an exception because it checks if the event name "null" is part of the wizard's startEvents. This blocks me from using the Stripes-Security package on wizard actionBeans.
Current workaround to get it work: Specifying an empty startEvent in the useActionBean tag.
Sorry, forgot to append the stacktrace:
net.sourceforge.stripes.exception.StripesRuntimeException: Submission of a wizard form in Stripes absolutely requires that the hidden field Stripes writes containing the names of the fields present on the form is present and encrypted (as Stripes write it). This is necessary to prevent a user from spoofing the system and getting around any security/data checks.
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.getFieldsPresentInfo(DefaultActionBeanPropertyBinder.java:333)
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.bindMissingValuesAsNull(DefaultActionBeanPropertyBinder.java:303)
net.sourceforge.stripes.controller.DefaultActionBeanPropertyBinder.bind(DefaultActionBeanPropertyBinder.java:204)
net.sourceforge.stripes.controller.DispatcherHelper$3.intercept(DispatcherHelper.java:194)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:158)
org.stripesstuff.plugin.security.SecurityInterceptor.interceptBindingAndValidation(SecurityInterceptor.java:152)
org.stripesstuff.plugin.security.SecurityInterceptor.intercept(SecurityInterceptor.java:117)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:155)
net.sourceforge.stripes.controller.BeforeAfterMethodInterceptor.intercept(BeforeAfterMethodInterceptor.java:113)
net.sourceforge.stripes.controller.ExecutionContext.proceed(ExecutionContext.java:155)
net.sourceforge.stripes.controller.ExecutionContext.wrap(ExecutionContext.java:74)
net.sourceforge.stripes.controller.DispatcherHelper.doBindingAndValidation(DispatcherHelper.java:190)
net.sourceforge.stripes.tag.UseActionBeanTag.doStartTag(UseActionBeanTag.java:140)
...