[ 
https://issues.apache.org/jira/browse/WW-4641?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15345939#comment-15345939
 ] 

Greg Huber commented on WW-4641:
--------------------------------

If %{bean.id} is not referring to id="bean" of the iterator, rather the page 
bean, them I am incorrect as have not understood the issue.

<s:iterator value="beanList" id="bean">
<s:textfield name="beanList(%{bean.id}).name" />

this works for me:

<s:iterator var="bean" value="eventList">
<s:hidden name="eventList(%{#bean.sequence}).sequence" 
value="%{#bean.sequence}" />

> CVE-2016-0785
> -------------
>
>                 Key: WW-4641
>                 URL: https://issues.apache.org/jira/browse/WW-4641
>             Project: Struts 2
>          Issue Type: New Feature
>          Components: Expression Language
>    Affects Versions: 2.3.20
>         Environment:  apache tomcat 6.0.27
>            Reporter: Samba
>            Assignee: Lukasz Lenart
>              Labels: features
>             Fix For: 2.3.30
>
>   Original Estimate: 168h
>  Remaining Estimate: 168h
>
> Hi Team,
> http://struts.apache.org/docs/s2-029.html
> please suggest the replacement code for %{..} for the latest version of the 
> struts 2.3.28
> Thanks
> Sambasiva Rao



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to