Please, do not waste reviewers time directing public discussion to security@ lists at the ASF. The developers who would resolve any such issue reside at their respective dev@ lists.
If you want to point out an undisclosed, undiscussed issue, then the appropriate security@ list would be the place to do so. And in general, DO NOT crosspost between public and private lists. It is one, or the other. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org