File struts.spec of Package struts

#
# spec file for package struts (Version 1.2.9)
#
# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#

# norootforbuild
# icecream 0

Name:           struts
BuildRequires:  ant-apache-oro ant-apache-regexp ant-nodeps ant-trax antlr classpath jakarta-commons-beanutils jakarta-commons-digester jakarta-commons-fileupload jakarta-commons-logging jakarta-commons-validator oro servletapi5 unzip update-alternatives xalan-j2
BuildRequires:  java-1_4_2-gcj-compat-devel
BuildRequires:  fdupes
%define name		struts
%define full_name	jakarta-%{name}
%define version		1.2.9
%define release		2jpp
%define tomcat6dir	tomcat6
#%define tomcat5dir	tomcat55
#%define tomcat3appsdir	%{_localstatedir}/tomcat3/webapps
#%define tomcat4appsdir	%{_localstatedir}/lib/tomcat4/webapps
%define tomcat6appsdir  /srv/%{tomcat6dir}/webapps
%define tomcat6ctxdir   %{_sysconfdir}/%{tomcat6dir}/Catalina/localhost
%define section		free
%define webapps		blank documentation example examples tiles-documentation
%define webapplibs commons-beanutils commons-digester commons-fileupload commons-validator oro struts
%define jdkmajorver 1.4
%define legacyver 1.0
Version:        1.2.9
Release:        162.31.1
Summary:        Web application framework
License:        The Apache Software License
Group:          Development/Libraries/Java
Source0:        struts-1.2.9-src.tar.bz2
Source3:        tomcat5-context-allowlinking.xml
Patch0:         build-webapps.xml-entity-lookup.patch
Patch1:         jakarta-struts-CVE-2008-2025.patch
Url:            http://jakarta.apache.org/struts/
Requires:       servlet
Recommends:     jdbc-stdext
Requires:       jakarta-commons-beanutils >= 1.6.1
Requires:       jakarta-commons-digester >= 1.5
Requires:       jakarta-commons-fileupload >= 1.0
Requires:       jakarta-commons-validator >= 1.0.2
Requires:       oro >= 2.0.7
Group:          Development/Libraries/Java
BuildArch:      noarch
BuildRoot:      %{_tmppath}/%{name}-%{version}-build

%description
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology. Struts encourages
application architectures based on the Model-View-Controller (MVC)
design paradigm, colloquially known as Model 2 in discussions on
various servlet and JSP related mailing lists. Struts includes the
following primary areas of functionality: A controller servlet that
dispatches requests to appropriate Action classes provided by the
application developer. JSP custom tag libraries, and associated support
in the controller servlet, that assists developers in creating
interactive form-based applications. Utility classes to support XML
parsing, automatic population of JavaBeans properties based on the Java
reflection APIs, and internationalization of prompts and messages.
Struts is part of the Jakarta Project, sponsored by the Apache Software
Foundation.

%package manual
License:        The Apache Software License
Summary:        Maual for struts
Group:          Development/Libraries/Java

%description manual
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology.

This package contains the manual for Struts.

%package javadoc
License:        The Apache Software License
Summary:        Javadoc for struts
Group:          Development/Libraries/Java

%description javadoc
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology.

This package contains the javadoc documentation for Struts.

%package webapps-tomcat6
License:        The Apache Software License
Summary:        Sample struts webapps for tomcat6
Group:          Development/Libraries/Java
Requires:       %{name} = %{version}-%{release}
Requires:       tomcat6
PreReq:         /usr/sbin/useradd, /usr/sbin/groupadd

%description webapps-tomcat6
Welcome to the Struts Framework! The goal of this project is to provide
an open source framework useful in building web applications with Java
Servlet and JavaServer Pages (JSP) technology.

This package contains sample webapps built with Struts for the Jakarta
Tomcat web application server.

%prep
rm -rf $RPM_BUILD_ROOT
%setup -n %{name}-%{version}-src -q
%patch0 -p1
%patch1 -p1

%build
mkdir lib
CLASSPATH=$(build-classpath          \
              xml-commons-apis       \
              jaxp_parser_impl       \
              jaxp_transform_impl    \
              xalan-j2-serializer    \
              glibj                  \
              servletapi5            \
              jspapi               ) \
  ant -Dcommons-beanutils.jar=$( build-classpath jakarta-commons-beanutils  ) \
      -Dcommons-digester.jar=$(  build-classpath jakarta-commons-digester   ) \
      -Dcommons-fileupload.jar=$(build-classpath jakarta-commons-fileupload ) \
      -Dcommons-logging.jar=$(   build-classpath jakarta-commons-logging    ) \
      -Dcommons-validator.jar=$( build-classpath commons-validator          ) \
      -Djakarta-oro.jar=$(       build-classpath oro                        ) \
      -Dantlr.jar=$(             build-classpath antlr                      ) \
      -Dstruts.el.home=contrib/struts-el                                      \
    all compile.javadoc

%install
# jars
install -d -m 755 $RPM_BUILD_ROOT%{_javadir}
install -m 644 target/library/%{name}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}-%{version}.jar
(cd $RPM_BUILD_ROOT%{_javadir} && for jar in *-%{version}*; do ln -sf ${jar} ${jar/-%{version}/}; done)
# javadoc
install -d -m 755 $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
cp -pr target/documentation/api/* $RPM_BUILD_ROOT%{_javadocdir}/%{name}-%{version}
rm -rf target/documentation/api
# data
install -d -m 755 $RPM_BUILD_ROOT%{_datadir}/%{name}
install -m 644 target/library/*.tld $RPM_BUILD_ROOT%{_datadir}/%{name}
install -m 644 target/library/*.dtd $RPM_BUILD_ROOT%{_datadir}/%{name}
## suse: no support for tomcat3. Sorry.
# tomcat 3 webapps
#install -d -m 755 $RPM_BUILD_ROOT%{tomcat3appsdir}
#for webapp in %{webapps}; do
#    cp -pr target/$webapp $RPM_BUILD_ROOT%{tomcat3appsdir}/%{name}-$webapp
#    # tomcat3 doesn't support allowLinking, this might not work
#	# XXX: move to %%post/preun
#	for jar in %{webapplibs}; do
#        (cd $RPM_BUILD_ROOT%{tomcat3appsdir}/%{name}-$webapp/WEB-INF/lib \
#        && ln -sf ../../../../../..%{_javadir}/$jar.jar .)
#	done
#    (cd $RPM_BUILD_ROOT%{tomcat3appsdir}/%{name}-$webapp/WEB-INF \
#    && for tld in ../../../../..%{_datadir}/%{name}/*.tld; do ln -sf $tld `basename $tld`; done)
#done
# suse: no support for tomcat4. sorry.
# tomcat 4 webapps
#install -d -m 755 $RPM_BUILD_ROOT%{tomcat4appsdir}
#for webapp in %{webapps}; do
#    cp -pr target/$webapp $RPM_BUILD_ROOT%{tomcat4appsdir}/%{name}-$webapp
#    cat %{SOURCE2} | sed -e "s/@@@APPNAME@@@/$webapp/g;" > $RPM_BUILD_ROOT%{tomcat4appsdir}/%{name}-$webapp.xml
#	# XXX: move to %%post/preun
#	for jar in %{webapplibs}; do
#        (cd $RPM_BUILD_ROOT%{tomcat4appsdir}/%{name}-$webapp/WEB-INF/lib \
#        && ln -sf ../../../../../../..%{_javadir}/$jar.jar .)
#    done
#    (cd $RPM_BUILD_ROOT%{tomcat4appsdir}/%{name}-$webapp/WEB-INF \
#    && for tld in ../../../../../..%{_datadir}/%{name}/*.tld; do ln -sf $tld `basename $tld`; done)
#done
# tomcat 6 webapps
install -d -m 755 $RPM_BUILD_ROOT%{tomcat6appsdir}
install -d -m 755 $RPM_BUILD_ROOT%{tomcat6ctxdir}
for webapp in %{webapps}; do
    cp -pr target/$webapp $RPM_BUILD_ROOT%{tomcat6appsdir}/%{name}-$webapp
    cat %{SOURCE3} | sed -e "s/@@@APPNAME@@@/$webapp/g;" > $RPM_BUILD_ROOT%{tomcat6ctxdir}/%{name}-$webapp.xml
	# XXX: move to %%post/preun
	for jar in %{webapplibs}; do
        (cd $RPM_BUILD_ROOT%{tomcat6appsdir}/%{name}-$webapp/WEB-INF/lib \
        && ln -sf ../../../../../..%{_javadir}/$jar.jar .)
    done
    (cd $RPM_BUILD_ROOT%{tomcat6appsdir}/%{name}-$webapp/WEB-INF \
    && for tld in ../../../../..%{_datadir}/%{name}/*.tld; do ln -sf $tld `basename $tld`; done)
done
%fdupes -s $RPM_BUILD_ROOT

%pre
/usr/sbin/groupadd -r tomcat 2> /dev/null || :
/usr/sbin/useradd -r -g tomcat -s /bin/bash \
                  -c "Tomcat - Apache Servlet/JSP Engine" \
                  -d %{_datadir}/%{tomcat6dir} tomcat 2> /dev/null || :

%clean
rm -rf $RPM_BUILD_ROOT

%files
%defattr(-,root,root)
%doc INSTALL README
%{_javadir}/*
%{_datadir}/%{name}

%files manual
%defattr(-,root,root)
%doc target/documentation/*.html
%doc target/documentation/*.gif
%doc target/documentation/uml
%doc target/documentation/userGuide
%doc target/documentation/images

%files javadoc
%defattr(-,root,root)
%{_javadocdir}/%{name}-%{version}

%files webapps-tomcat6
%defattr(-,tomcat,tomcat)
%dir /srv/%{tomcat6dir}
%dir /srv/%{tomcat6dir}/webapps
%dir %{_sysconfdir}/%{tomcat6dir}
%dir %{_sysconfdir}/%{tomcat6dir}/Catalina
%dir %{_sysconfdir}/%{tomcat6dir}/Catalina/localhost
%{tomcat6appsdir}/%{name}-blank
%{tomcat6appsdir}/%{name}-documentation
%{tomcat6appsdir}/%{name}-example
%{tomcat6appsdir}/%{name}-examples
%{tomcat6appsdir}/%{name}-tiles-documentation
%{tomcat6ctxdir}/%{name}-*.xml

%changelog
* Thu Apr  2 2009 mvyskocil@suse.cz
- fixed CVE-2008-2025 (bnc#385273)
- fdupes usage
* Thu Mar 20 2008 anosek@suse.cz
- struts-webapps-tomcat now depends on tomcat6
* Mon Sep  3 2007 anosek@suse.de
- removed tomcat55 from BuildRequires because of cyclic dependency
* Tue Aug 21 2007 anosek@suse.cz
- fixed unresolvable dependency: struts-webapps-tomcat5 -> tomcat5 [#297708]
  * added tomcat55 to Requires and BuildRequires
  * changed files locations to fit tomcat55 directory structure
  * don't pack directories which are already owned by tomcat55 package
* Wed May  2 2007 dbornkessel@suse.de
- added unzip to BuildRequires
* Thu Jan 11 2007 dbornkessel@suse.de
- big update from 1.2.4 to 1.2.9, which fixes a lot of issues:
  1.2.9:
  - TagUtils doesn't create XHTML compliant URLs using forwards defined with redirect="true".
  - Add EventDispatchAction and EventActionDispatcher.
  - Javascript tag does not work on Mozilla.
  - XSS vulnerability in LookupDispatchAction.
  - DOS attack, application hack.
  - Validation always skipped with Globals.CANCEL_KEY.
  - struts-el html tag library errorKey not using documented default value.
  1.2.8:
  - Escape newlines in Validator variables.
  - Changing rendering of the form name to use the 'id' attribute when in XHTML strict mode.
  - Fix for Struts XSS Vulnerability - remove uri from error messages.
  - Remove I18nFactorySet copied code.
  - Provide config option to turn off MessageResources escape processing.
  - Fix bug where non-resource action messages only work for the first message in the messages list.
  - Correct link on the acquiring page to the maven generated nightly builds.
  - Update TagUtils to provide a more specific error message where properties on a formbean are not found.
  - Update to the HTML tag library docs.
  - Update tag library configuration docs for Servlet 2.4.
  - Filter html sensitive characters in the <html:radio> tag's value.
  - <html:options> tag logic updated to be more efficient with use of iterators.
  - Add better error reporting to <bean:define> tag.
  - Add warning to ActionMapping.findForward() method if not found.
  - Add comment regarding jdbc20ext.jar and JDK to build.properties.sample.
  - Add no-arg constructor to ModuleConfigImpl.
  1.2.7:
  - Prevent NullPointerException when toString() is called before dynaClass is initialized.
  - Retrieve FormTag stored in Request scope, rather than the TagSupport's findAncestorWithClass() .
  - Fixing value escape so that both backslashes and quotes are escaped correctly.
  - Additional fix to "Invalid cache in InsertTag" for a problem on Orion.
  - Fix cactus tests to work with Cactus 1.7.
  - Page attribute of img and image tags doesn't use pagePattern setting.
  - BeanValidatorForm's getValidationKey method should call mapping.getAttribute().
  - Add ActionDispatcher to provide dispatch behavior to classes that do not extend DispatchAction.
  - Add a check for null page value and throwing more informative exception.
  - Add a check for missing Validator Resources and throw a more useful error message.
  - LogonAction does not check errors in appropriate place.
  - Add TilesRequestProcessor handling for NoSuchDefinitionException.
  - Implement Servlet 2.3/2.4 methods using reflection in MultipartRequestWrapper.
  - Synchronize the Nested tag attributes for changes made in Bug #17708 and Bug #21603.
  - Resolve <html:link> ClassCastException when a non String paramId value already exists in the params map.
  - Allow saving errors to the session in the same way that messages are.
  - Change JavascriptValidatorTag to escape double quotes in variable values.
  - Change DigestingPlugIn to give an explicit message when configSource/configPath yields a null URL.
  - Automatic readonly/disabled settings using new <html:form> tag attributes.
  - Resolve HTML Link Tag not working with JSTL Loop Tag.
  - Improve ValidWhen Exception Handling - exceptions are now logged and validation fails returning an error message with details of the error.
  - A validwhen examples page and validation resource/bundles example pages (Server Side and JavaScript) have been added to the struts-examples webapp.
  - Commons Validator dependency changed to version 1.1.4.
  - Add "bundle" attribute to El version of JavascriptValidatorTag.
  - Resolve #21760 Support for non-default resource bundles in validation. Resolve #18169 Resource attribute of msg tag in the validation.xml doesn't work.
  - Fix invalid XML in the struts-doc-config.xml file in the Tiles Documentation webapp.
  - Add doubleRange validator to the validator-rules.xml
  - Name attribute is no longer rendered in the <html:form> tag if the rendering mode is XHTML.
  - JavaDoc corrections.
  - Fix @link() tags
  - Add ActionRedirect class to allow adding request parameters to redirecting forwards.
  - Resolve memory leaks with JBoss 3.x +(Tomcat/Jetty).
  - Change DownloadAction to use supplied buffer size.
  - Sync up the EL tags with their non-EL counterparts. This adds the 'bundle' attribute to many tags, and also the 'error*' attributes, and 'header', 'footer', 'prefix' and 'suffix' for the Errors tag.
  - Change ModuleException to ensure all constructors invoke super. Resolve #32504 - document the means used to format values in the <bean:write> tag. Resolve #32016 - wrap the hidden token field in a <div> element for HTML 4.01 Strict compliance.
  - Remove use of "enum" as its a keyword in Java 5.
  1.2.6:
  - Resolve <bean:include> always include Session id (if any) even for external Urls (href attribute)
  - Two slashes created by TagUtils.getActionMappingURL for webapps in root context
  - Add a warning to reset FormFile
  - Shale mailreader example should define the servlet version as 2.4
  - Changes to update maven build after SVN layout re-org.
  - Remove redundant definitions of maven.repo.central and maven.repo.central.directory
  - Added ability to load struts, validator, and tiles config files from classloader if not found in the servlet context.
  - Better handling of servlet initialization errors to mark the servlet as unavailable and notify the developer of the probable cause.
  - Add missing base class for Shale test cases.
  - Must use contextRelative to forward to Actions in Default module.
  - Subversion repository rearranged into separate core, el, faces and sandbox subprojects.
  - Validator validwhen documentation typo.
  - DigestingPlugIn can't load a digester rule file.
  - "Created" boolean in FacesRequestProcessor.doForward() not being set
  - Improve TagUtils.filter() performance.
  - Add LazyValidatorForm
  - Change BeanUtils dependency to 1.7.0, Digester dependency to 1.6 and remove Collections Dependency
  - Add "actions/DownloadAction.java", an abstract action that provides the nuts and bolts for downloading files.
  - Document that if a link to a forward is used to switch modules, the path must point to an action.
  - Message resources file in Struts Blank is misplaced. [55584] Update README with new layout.
  - Using a tiles definition as errorPage causes infinite looping
  - NullPointerException in ActionServlet
  - Implement Serializable on ActionServletWrapper
  - Add documentation to base chain-config.xml to help Tiles users.
  - Document the default value for "scope" on an <action> element in the DTD for a struts-config.xml file (along with all the other documentation).
  1.2.5:
  - Remove dependency on commons-lang.
  - Move Struts-Faces from "contrib" to the trunk.
  - Add header,footer,prefix,suffix attributes to ErrorsTag.
  - Have Tiles ControllerSupport execute() call perform() for backward compatibility. To be removed after version 1.2.
  - Add validwhen test to compare two Strings containing numbers.
  - validwhen validator should do numeric compare when both items convertable to Integer.
  - Move repository to Subversion.
  - Better i18n and alternate bundle support for html tags. Add missing "bundle" attribute to tld for html tags. Tags affected are ButtonTag, CancelTag, CheckboxTag, FileTag, FrameTag, HiddenTag, LinkTag, MultiboxTag, PasswordTag, RadioTag, ResetTag, SelectTag, SubmitTag,TextTag, TextareaTag. Also added a test for the bundle attribute for each of the above tags.
  - Add missing nested tag attributes. Resolve #31212 "nested:link module attribute not specified in tld". Resolve #20417 "Attribute idName not declared for NestedRadioTag".
  - Forward path in Validator struts-config.xml in struts-examples incorrect
  - Refactor some of the HTML tags make extending them easier.
  - * added prepareOtherAttributes() method
  - * added prepareName() method
  - * use getters rather than instance variables
  - * refactored SubmitTag - ButtonTag, CancelTag and ResetTag now inherit from SubmitTag.
* Thu Sep 28 2006 skh@suse.de
- add xalan-j2 to BuildRequires and xalan-j2-serializer.jar to
  build classpath
- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5
* Wed May 24 2006 dbornkessel@suse.de
- changed hard requirement on jdbc-stdext to 'Recommends', as it is not available on some platforms (s390[x])
  Bug 177909
* Thu Apr 27 2006 dbornkessel@suse.de
- backported struts security fixes from 1.2.9 -> 1.2.4
  Struts bugs:
  * Bug 38374 - Validation always skipped with Globals.CANCEL_KEY.
  * Bug 38534 - DOS attack, application hack.
  * Bug 38749 - XSS vulnerability in LookupDispatchAction.
  Novell bug: 162429
* Mon Apr 24 2006 dbornkessel@suse.de
- bug #140311 fix (file list changed)
* Wed Jan 25 2006 mls@suse.de
- converted neededforbuild to BuildRequires
* Thu Sep 29 2005 dmueller@suse.de
- add norootforbuild
* Mon Mar 14 2005 skh@suse.de
- use correct tomcat5 directories for webapps (#63194)
* Tue Feb 22 2005 skh@suse.de
- update to version 1.2.4
* Mon Sep  6 2004 skh@suse.de
- Initial package created with version 1.1 (JPackage 1.5)