[
https://issues.apache.org/jira/browse/WW-5837?focusedWorklogId=1052348&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-1052348
]
ASF GitHub Bot logged work on WW-5837:
--------------------------------------
Author: ASF GitHub Bot
Created on: 04/Nov/26 06:38
Start Date: 04/Nov/26 06:38
Worklog Time Spent: 10m
Work Description: lukaszlenart opened a new pull request, #2107:
URL: https://github.com/apache/struts/pull/2107
Fixes [WW-5837](https://issues.apache.org/jira/browse/WW-5837)
Bumps `ognl:ognl` from 3.4.16 to 3.4.17. Supersedes #2103.
OGNL 3.4.17 matches property names exactly in `OgnlRuntime.getReadMethod` /
`getWriteMethod`. A mis-cased name no longer resolves to an accessor spelled
differently.
`OgnlSetPossiblePropertyTest.testWriteMethodValueDontAssignWhenWriteMethodIsNotAccessible`
asserted the old case-insensitive answer (`setexcludedfieldstring` for
`excludedFieldString`) and failed with an NPE on #2103. It now expects no write
method; the assertion that the value stays unassigned is unchanged.
Core tests pass locally against 3.4.17 (4752 run, 0 failures).
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Issue Time Tracking
-------------------
Worklog Id: (was: 1052348)
Remaining Estimate: 0h
Time Spent: 10m
> Upgrade OGNL to version 3.4.17
> ------------------------------
>
> Key: WW-5837
> URL: https://issues.apache.org/jira/browse/WW-5837
> Project: Struts 2
> Issue Type: Dependency
> Components: Core
> Reporter: Lukasz Lenart
> Assignee: Lukasz Lenart
> Priority: Major
> Fix For: 7.5.0
>
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Bump {{ognl:ognl}} from 3.4.16 to 3.4.17.
> OGNL 3.4.17 matches property names exactly in {{OgnlRuntime.getReadMethod}} /
> {{getWriteMethod}}; a mis-cased name no longer resolves to an accessor of a
> different spelling. One test fixture in {{OgnlSetPossiblePropertyTest}}
> relied on the case-insensitive lookup and needs updating alongside the bump.
> Supersedes Dependabot PR [#2103|https://github.com/apache/struts/pull/2103].
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)