We did an internal research on the issue with JSON and it looks like, the arrays are only vulnerable, if output contains an object, it isn't a valid JavaScript.
IE8, FF3, FF5, Chrome Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ Warszawa JUG conference - Confitura http://confitura.pl/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org
