Rene Gielen created WW-3858:
-------------------------------
Summary: Decouple token names from their respective session
attribute names
Key: WW-3858
URL: https://issues.apache.org/jira/browse/WW-3858
Project: Struts 2
Issue Type: Improvement
Components: Core Interceptors
Affects Versions: 2.3.4
Reporter: Rene Gielen
Assignee: Rene Gielen
Fix For: 2.3.5
Currently token names are used as is to store session attributes for later
token check. By namespacing session attributes security can be improved.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
