śr., 15 sty 2025 o 08:51 Florian Schlittgen <schlitt...@liwa.de> napisał(a):
>
> On 15.01.25 08:25, Lukasz Lenart wrote:
> > I assume you jar
> > contains only Convention based actions?
> Yes, they are all Convention based actions.
> Sorry, I didn't had the time to do more testing. If you want me to try
> something out, just let me know.

I wonder if this isn't related to allowlist functionality related
https://cwiki.apache.org/confluence/display/WW/Struts+6.x.x+to+7.x.x+migration#Struts6.x.xto7.x.xmigration-OGNLallowlistcapability

Could you try to define struts.allowlist.packageNames or disable it
struts.allowlist.enable=false? I meant we are probably missing
something around this when loading actions from JARs, as the allowlist
are dynamically updated based on convention mechanism


Regards
Lukasz

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org

Reply via email to