lukaszlenart commented on PR #806:
URL: https://github.com/apache/struts/pull/806#issuecomment-1859195214

   Just tested the Showcase app and it doesn't look good ;-)
   ```
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:205) - 
Declaring class [interface java.util.Map$Entry] of member type [public abstract 
java.lang.Object java.util.Map$Entry.getKey()] is not allowlisted!
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - Access 
to non-public [final java.lang.Object java.util.HashMap$Node.key] is blocked!
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - Access 
to non-public [protected java.lang.String 
org.apache.struts2.components.UIBean.key] is blocked!
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:205) - 
Declaring class [interface java.util.Map$Entry] of member type [public abstract 
java.lang.Object java.util.Map$Entry.getValue()] is not allowlisted!
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - Access 
to non-public [java.lang.Object java.util.HashMap$Node.value] is blocked!
   [WARN ] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - Access 
to non-public [protected java.lang.String 
org.apache.struts2.components.UIBean.value] is blocked!
   ...
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to