[ 
https://issues.apache.org/jira/browse/WW-3485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12925472#action_12925472
 ] 

Maurizio Cucchiara commented on WW-3485:
----------------------------------------

Dave,
>Have you tried something like int_int (underscore) instead? 
I suppose he meant underscore when he talked about dash (but I could be wrong, 
as my English is around 1% of yours :) )
Anyway, excluding minus character involves backward compatibility.

As far as I remember minus character don't allows malicious users to compromise 
security system (# character was first candidate, because it allowed session 
injection). 



> Map of beans mapping behaviour in Struts 2.2 seems to have changed from 
> 2.1.8.1
> -------------------------------------------------------------------------------
>
>                 Key: WW-3485
>                 URL: https://issues.apache.org/jira/browse/WW-3485
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core Actions
>    Affects Versions: 2.2.1
>         Environment: Struts 2.2.1
>            Reporter: Denis Cabasson
>         Attachments: WW-3485-test.zip, WW-3485.patch
>
>
> The usage of a map of String * Bean which was working fine with Struts 
> 2.1.8.1 is broken with Struts 2.2.1. I read all the documentation relating to 
> conversions and parameters and did not find any hint of a change in behavior 
> of Struts 2.2 against 2.1, except for the changes in OGNL.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to