[
https://issues.apache.org/jira/browse/WW-4429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14242464#comment-14242464
]
Lukasz Lenart commented on WW-4429:
-----------------------------------
Please read this [topic|http://markmail.org/message/e4atc5qjqwromrs6] and this
[instruction|https://cwiki.apache.org/confluence/display/WW/Security#Security-Accessingstaticmethods]
which is mentioned in the version notes.
> struts.ognl.allowStaticMethodAccess is not working for static method
> --------------------------------------------------------------------
>
> Key: WW-4429
> URL: https://issues.apache.org/jira/browse/WW-4429
> Project: Struts 2
> Issue Type: Bug
> Components: Core Actions
> Affects Versions: 2.3.20
> Reporter: Tom Nguyen
> Labels: xwork
> Fix For: 2.3.x
>
>
> Setting <constant name="struts.ognl.allowStaticMethodAccess" value="true"/>
> in struts.xml can only allow access to static fields but not static methods
> for example
> <s:property value="@java.util.Calendar@DAY_OF_WEEK"/> is working
> But
> <s:property
> value="@com.your.full.package.Classname@methodName(optionalParameters)" />
> not working
> This feature used to work in struts-2.3.16.3, but not working after upgrade
> to struts-2.3.20
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
