Description
It is currently possible to exclude packages from OGNL evaluation using `struts.excludedPackageNamePatterns` and `struts.excludedPackageNames`.
There may exist a scenario where you wish to have certain packages excluded/blocklisted by default, but exempt specific classes from these packages that have been assessed to be safe.
Attachments
Issue Links
- is related to
-
WW-5288 Make excluded package exemption logic more strict
-
- Closed
-
- links to
