[WW-2489] Interceptor Stack Order

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Not A Problem
• Affects Version/s: 2.0.11
• Component/s: XML Configuration

Environment

any

• Assignee: Unassigned
• Reporter: GF
• Created: 14/Feb/08 11:16
• Updated: 28/Oct/12 22:13
• Resolved: 20/Apr/08 03:38

Description

struts-default.xml (struts 2.0.11) gives this interceptor order in the stacks:

<interceptor-ref name="staticParams"/>
<interceptor-ref name="params"/>

is it correct that staticParams comes before params ? this allow GET and POST variable to overwrite statically set parameters. Maybe this can lead to security risks.