[
https://issues.apache.org/jira/browse/WW-4728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15811480#comment-15811480
]
Hudson commented on WW-4728:
----------------------------
SUCCESS: Integrated in Jenkins build Struts-JDK7-master #580 (See
[https://builds.apache.org/job/Struts-JDK7-master/580/])
WW-4728 Allows override request parameter names used to enable (lukaszlenart:
rev 08e181a4febb4e999e5e3366a0890eb1d5a953e5)
* (edit)
plugins/json/src/main/java/org/apache/struts2/json/JSONValidationInterceptor.java
* (edit)
plugins/json/src/test/java/org/apache/struts2/json/JSONValidationInterceptorTest.java
> JSONValidationInterceptor change static parameters names
> --------------------------------------------------------
>
> Key: WW-4728
> URL: https://issues.apache.org/jira/browse/WW-4728
> Project: Struts 2
> Issue Type: Bug
> Components: Plugin - JSON
> Reporter: Alireza Fattahi
> Assignee: Lukasz Lenart
> Fix For: 2.5.next
>
>
> For security reasons I want to not reveal that we are using struts2 in our
> site. But the hackers can find it if they see the hidden parameters in the
> request.
> Is it possible to make below parameters configurable ( For example in
> struts.xml)
> {code}
> public static final String VALIDATE_ONLY_PARAM = "struts.validateOnly";
> public static final String VALIDATE_JSON_PARAM =
> "struts.enableJSONValidation";
> public static final String NO_ENCODING_SET_PARAM =
> "struts.JSONValidation.no.encoding";
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
