[WW-3538] Remove Dynamic Method Invocation

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.11.1, 2.0.11.2, 2.0.12, 2.0.13, 2.0.14, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.8, 2.1.8.1, 2.2.1, 2.2.1.1
• Fix Version/s: 2.3.1
• Component/s: Core Actions
• Flags: Important
• Assignee: Lukasz Lenart
• Reporter: Lukasz Lenart
• Created: 02/Dec/10 06:46
• Updated: 02/Feb/11 23:33
• Resolved: 02/Feb/11 23:33

Description

In all current Struts 2 version you can use Dynamic Method Invocation to call particular public Action's method use syntax:

/actionname!methodname

It can be disabled by defining constant struts.enable.DynamicMethodInvocation = false

The idea is to totally remove such functionality from the project.

Issue Links

• is related to: WW-2363 Allow limiting of action methods
• relates to: WW-3264 Vulnerability of dynamic method invocation