Restricting to public methods on the action class/package would be more useful, may be less of an overhead? It would be inherited methods that could potentially cause the issues.
On 15 September 2015 at 08:11, Lukasz Lenart <lukaszlen...@apache.org> wrote: > I have extended the list of default 'global-allowed-methods' but I am > wondering if support for 'package-allowed-methods' is needed? > 'global-allowed-methods' are inherited from package to package where > 'package-allowed-methods' wouldn't be. WDYT? > > This can always be added later. > > 2015-09-04 12:25 GMT+02:00 Lukasz Lenart <lukaszlen...@apache.org>: > > I have updated PR description with more detailed info > > https://github.com/apache/struts/pull/47 > > > > > > Regards > > -- > > Łukasz > > + 48 606 323 122 http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org > For additional commands, e-mail: dev-h...@struts.apache.org > >
