[ 
https://issues.apache.org/jira/browse/WW-3755?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13211759#comment-13211759
 ] 

Maurizio Cucchiara commented on WW-3755:
----------------------------------------

OK,
now I'm really confused.
Your patch has referenced a private String until last patch (which IMHO is 
shareable among many instances), now you're talking about a pattern.
Have you considered to extend ParametersInterceptor and overwrite setParameters 
method?

Anyway for security reason, you should change the code below from: 
{code}
temp.setValue(entry.getKey(), entry.getValue());
{code}
to:
{code}
temp.setParameter(entry.getKey(), entry.getValue());
{code}
                
> make ParametersInterceptor.acceptedParamNames public and static
> ---------------------------------------------------------------
>
>                 Key: WW-3755
>                 URL: https://issues.apache.org/jira/browse/WW-3755
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core Interceptors
>            Reporter: zhouyanming
>         Attachments: WW-3755.patch, patch.txt
>
>
> let it can be referenced by other classes

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to