[WW-4073] Disable eval expressions and simple JSTL accessibility - ASF JIRA

XML

Word

Printable

JSON

Details

Type: New Feature
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 2.3.14
Fix Version/s: 2.3.15
Component/s: None
Labels:
None

Flags:

Patch, Important

Description

afaik the simple JSTL accessibility is used only in jsp. Currently we have a hacky interceptor to disable it (see attached), would be nice if it were an option.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

StrutsRequestWrapperDisablingInterceptor.java
22/May/13 05:48
0.7 kB
Johno Crawford
disable_request_attribute_value_stack_lookup.patch
10/Jun/13 08:28
9 kB
Johno Crawford

Activity

People

Assignee:: Maurizio Cucchiara

Reporter:: Johno Crawford

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Dates

Created:: 22/May/13 05:39

Updated:: 24/Jun/13 09:24

Resolved:: 10/Jun/13 16:20