Greg Huber created WW-5115:
------------------------------
Summary: Reduce logging for DMI excluded parameters
Key: WW-5115
URL: https://issues.apache.org/jira/browse/WW-5115
Project: Struts 2
Issue Type: Improvement
Components: Core
Affects Versions: 2.5.25
Reporter: Greg Huber
There are unnecessary log warning when DMI is enabled, from the
ParametersInterceptor. eg property 'action:myAction!save' should not be
considered as a bean/property parameter, as its used as part of DMI to submit
the form.
WARN com.opensymphony.xwork2.interceptor.ParametersInterceptor
ParametersInterceptor:isAccepted - Parameter [action:myAction!save] didn't
match accepted pattern
[[\w+((\.\w+)|(\[\d+])|(\(\d+\))|(\['(\w|[\u4e00-\u9fa5])+'])|(\('(\w|[\u4e00-\u9fa5])+'\)))*]]!
See Accepted / Excluded patterns at
https://struts.apache.org/security/#accepted--excluded-patterns
Any property which matches the DMI method invocation "^(action|method):.*"
needs to be silently ignored and not logged.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
