Struts 2
  1. Struts 2
  2. WW-3860

Restrict accepted parameter name length

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 2.3.4
    • Fix Version/s: 2.3.4.1
    • Component/s: Core Interceptors
    • Labels:
      None

      Description

      Long parameter names are costly to evaluate for OGNL and should be limited to a reasonable length, in our case 100 characters.

        Activity

        Hide
        Hudson added a comment -

        Integrated in Struts2 #516 (See https://builds.apache.org/job/Struts2/516/)
        WW-3860
        Restrict accepted parameter name length
        Thanks to Johno Crawford for the patch. (Revision 1368841)

        Result = SUCCESS
        rgielen :
        Files :

        • /struts/struts2/trunk/xwork-core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java
        • /struts/struts2/trunk/xwork-core/src/test/java/com/opensymphony/xwork2/interceptor/ParametersInterceptorTest.java
        Show
        Hudson added a comment - Integrated in Struts2 #516 (See https://builds.apache.org/job/Struts2/516/ ) WW-3860 Restrict accepted parameter name length Thanks to Johno Crawford for the patch. (Revision 1368841) Result = SUCCESS rgielen : Files : /struts/struts2/trunk/xwork-core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java /struts/struts2/trunk/xwork-core/src/test/java/com/opensymphony/xwork2/interceptor/ParametersInterceptorTest.java
        Hide
        Rene Gielen added a comment -

        Johno's patch applied.

        Show
        Rene Gielen added a comment - Johno's patch applied.

          People

          • Assignee:
            Rene Gielen
            Reporter:
            Rene Gielen
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development