Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Struts Wiki" for change 
notification.

The following page has been changed by NiallPemberton:
http://wiki.apache.org/struts/StrutsXssVulnerability

------------------------------------------------------------------------------
  
  {{{
     <struts-config>
-        ...
+        <action-mappings>
+            <action forward="/CustomNotFoundError.jsp" unknown="true" />
+        </action-mappings>
+    </struts-config>
+ }}}
  
+ Ralph Hauser reports that the above "doesn't validate with the 1.2 DTD". I 
tried it in the struts-examples webapp for Struts 1.2.7 and it worked fine for 
me - ''niallp''. However, if the above doesn't work, then add a "path" element 
to the action mapping:
+ {{{
+    <struts-config>
         <action-mappings>
- 
-            <action forward="/CustomNotFoundError.jsp" unknown="true" />
+            <action path="/unknown" forward="/CustomNotFoundError.jsp" 
unknown="true" />
- 
         </action-mappings>
- 
     </struts-config>
  }}}
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to