[jira] [Work logged] (WW-5368) Access warning when get resource bundle which its name starts with "label"

[ASF GitHub Bot (Jira)]

     [ 
https://issues.apache.org/jira/browse/WW-5368?focusedWorklogId=992995&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-992995
 ]

ASF GitHub Bot logged work on WW-5368:
--------------------------------------

                Author: ASF GitHub Bot
            Created on: 23/Nov/25 12:11
            Start Date: 23/Nov/25 12:11
    Worklog Time Spent: 10m 
      Work Description: sonarqubecloud[bot] commented on PR #1420:
URL: https://github.com/apache/struts/pull/1420#issuecomment-3567886355

   ## [![Quality Gate 
Failed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-failed-20px.png
 'Quality Gate 
Failed')](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1420) 
**Quality Gate failed**  
   Failed conditions  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/failed-16px.png
 '') [77.4% Coverage on New 
Code](https://sonarcloud.io/component_measures?id=apache_struts&pullRequest=1420&metric=new_coverage&view=list)
 (required ≥ 80%)  
     
   [See analysis details on SonarQube 
Cloud](https://sonarcloud.io/dashboard?id=apache_struts&pullRequest=1420)
   
   




Issue Time Tracking
-------------------

    Worklog Id:     (was: 992995)
    Time Spent: 40m  (was: 0.5h)

> Access warning when get resource bundle which its name starts with "label"
> --------------------------------------------------------------------------
>
>                 Key: WW-5368
>                 URL: https://issues.apache.org/jira/browse/WW-5368
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core
>    Affects Versions: 6.3.0
>            Reporter: Alireza Fattahi
>            Assignee: Lukasz Lenart
>            Priority: Critical
>             Fix For: 7.2.0
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> The below:
> {code:java}
> <s:select name="reasonOfTransactionCode" list="reasonOfTransactionList"      
> listKey="top" listValue="%{getText('label.reasonOfTransaction.'+top)}"/> 
> {code}
> generates this warning for each item in the list, so if the 
> `reasonOfTransactionList` has seven items I see this error seven time:
> {code:java}
> ognl.SecurityMemberAccess: Access to non-public [protected java.lang.String 
> org.apache.struts2.components.UIBean.label] is blocked!
>  
> {code}
>  
> But this works fine If I  just rename resource bundle and removes `label` 
> from its name
>  
> {code:java}
> <s:select name="reasonOfTransactionCode" list="reasonOfTransactionList"      
> listKey="top" listValue="%{getText('reasonOfTransaction.'+top)}"/> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)