[WW-5340] Introduce optional AST node exclusion list

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 6.4.0
• Component/s: Core
• Assignee: Unassigned
• Reporter: Kusal Kithul-Godage
• Created: 22/Aug/23 12:02
• Updated: 20/Apr/24 11:59
• Resolved: 30/Sep/23 08:39

Description

Enhance security by implementing an optional exclusion list (in struts.xml) where applications can specify AST nodes that are not required in their applications or are known to carry higher security risk.

Issue Links

• links to: GitHub Pull Request #746
• links to: GitHub Pull Request #747
• links to: GitHub Pull Request #760