Restricting to public methods on the action class/package would be more useful, may be less of an overhead? It would be inherited methods that could potentially cause the issues.
On 15 September 2015 at 08:11, Lukasz Lenart <[email protected]> wrote: > I have extended the list of default 'global-allowed-methods' but I am > wondering if support for 'package-allowed-methods' is needed? > 'global-allowed-methods' are inherited from package to package where > 'package-allowed-methods' wouldn't be. WDYT? > > This can always be added later. > > 2015-09-04 12:25 GMT+02:00 Lukasz Lenart <[email protected]>: > > I have updated PR description with more detailed info > > https://github.com/apache/struts/pull/47 > > > > > > Regards > > -- > > Łukasz > > + 48 606 323 122 http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
