Added `strict-method-invocation` attribute back to allow disable the Strict DMI mode. Also improved a bit how Strict DMI logic works, right now it's as follow: - <allowed-methods> / @AllowedMethods defined per action - Strict DMI works without switching it on but just for those actions (plus adding <global-allowed-methods/>) - Strict DMI enabled but no <allowed-methods> / @AllowedMethods are defined - Strict DMI works but only with <global-allowed-methods/> - Strict DMI disabled - call to any action method is allowed (Regex: .*)
Besides the above, each method defined in <action/>'s "method" attribute is automatically allowed, the same for method marked with @Action annotation. Also added support to allow define allowed methods with regex, just use "regex:" prefix, ie. <global-allowed-methods>execute,input,cancel,regex:user([A-Z]*)</global-allowed-methods> Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ PS. docs will be updated as soone we get consensus on this PR --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org
