This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a commit to branch docs/struts-7.3.0-content-audit in repository https://gitbox.apache.org/repos/asf/struts-site.git
commit 51639c60ba1838ff1cde1c0f1c855d232251ae06 Author: Lukasz Lenart <[email protected]> AuthorDate: Mon Aug 3 07:38:37 2026 +0200 docs: simplify the creator-bound properties heading and its anchor Co-Authored-By: Claude Opus 5 <[email protected]> --- source/core-developers/struts-parameter-annotation.md | 2 +- source/plugins/rest/index.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/source/core-developers/struts-parameter-annotation.md b/source/core-developers/struts-parameter-annotation.md index 01bc768f2..916607c7b 100644 --- a/source/core-developers/struts-parameter-annotation.md +++ b/source/core-developers/struts-parameter-annotation.md @@ -29,7 +29,7 @@ channel that can populate an action from request data: - [JSON](../../plugins/json) and [REST](../../plugins/rest) plugins — per-property authorization performed during deserialization, so unauthorized fields are never set. -### Creator-bound properties (records, `@JsonCreator`) +### Creator-bound properties Up to Struts 7.2.1 the REST plugin's authorization wrapper covered only properties Jackson populates through a setter, a field or a builder. Properties bound through a **constructor** — Java records, `@JsonCreator` constructors and diff --git a/source/plugins/rest/index.md b/source/plugins/rest/index.md index a830ee4e3..380b51bc0 100644 --- a/source/plugins/rest/index.md +++ b/source/plugins/rest/index.md @@ -330,7 +330,7 @@ authorization callbacks) instead of `ContentTypeHandler` directly. Since Struts 7.3.0 that enforcement also covers **constructor-bound** properties — Java records, `@JsonCreator` constructors and `@ConstructorProperties` — which previously bypassed it. If your controllers accept records in the request body, make sure they are reachable from an authorized property; see -[Creator-bound properties](../../core-developers/struts-parameter-annotation.html#creator-bound-properties-records-jsoncreator). +[Creator-bound properties](../../core-developers/struts-parameter-annotation.html#creator-bound-properties). {:.alert .alert-warning} ### Settings
