Lukasz Lenart created WW-5809:
---------------------------------
Summary: Fail configuration loading for non-public XML action
classes
Key: WW-5809
URL: https://issues.apache.org/jira/browse/WW-5809
Project: Struts 2
Issue Type: Task
Components: Core
Reporter: Lukasz Lenart
Fix For: 8.0.0
Since 7.5.0 (WW-5792), {{XmlDocConfigurationProvider#verifyAction}} logs a WARN
when an action class is not public and configuration loading continues.
In 8.0.0 it should throw {{ConfigurationException}} instead, placed so the
generic {{catch (RuntimeException)}} handler cannot swallow it. That matches
the Struts Boot registry provider (WW-5791), which already fails startup for
non-public action classes.
Out of scope: the container-wide {{setAccessible(true)}} in {{ContainerImpl}},
which also covers interceptors, results and user beans.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
