2016-04-20 10:07 GMT+02:00 Christoph Nenning <christoph.nenn...@lex-com.net>: > Hi, > > I wonder about excludedClasses in 2.3.20.2 and 2.3.24.2. > > Both contain "ognl.MemberAccess" twice and both lack > "java.lang.ProcessBuilder". Why is that?
Overlooked :( And cherry-picking :\ But the most important thing is `isSequence` flag - that will block any chained expressions where `ProcessBuilder` would be used. Should I drop those versions and start over? Regards -- Łukasz + 48 606 323 122 http://www.lenart.org.pl/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org For additional commands, e-mail: dev-h...@struts.apache.org
