GitHub user johnou opened a pull request:
https://github.com/apache/struts2/pull/5
Disable eval expressions and simple jstl accessibility
afaik the simple jstl accessibility is used only in jsp. Currently we have
a hacky interceptor to disable it, would be nice if it were an option.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/johnou/struts2
disable_simple_jstl_accessibility
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/struts2/pull/5.patch
----
commit d4c4e615bee50884838f1b8f928106378afa5de2
Author: Maurizio Cucchiara <[email protected]>
Date: 2013-04-18T09:49:41Z
Disable eval expressions
git-svn-id:
https://svn.apache.org/repos/asf/struts/struts2/branches/STRUTS_2_3_14_X@1469249
13f79535-47bb-0310-9956-ffa450edef68
commit bbaab4e50fefb3be092071bf43c905ff05ce0383
Author: Johno Crawford <[email protected]>
Date: 2013-05-21T13:38:15Z
Add option for disabling JSTL accessibility.
----
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
