Re: Max length for OGNL expression

Seems to me not to be the right place to correct any possible problems, and far off any related root of a possible issue. The config would definitively need an option to be disabled totally. I expect very unexpected and hard to trace side effects, depending on the application in place. Markus

Max length for OGNL expression

Hi, I thought it might be nice to add a config element which confines the length of OGNL expression that Struts is going to evaluate. It is going to make hackers life harder :) How do you see it? Best. - To unsubscribe,

Build failed in Jenkins: Struts-master-JDK8-dependency-check #206

See -- [...truncated 690.64 KB...] [INFO] [INFO] Results: [INFO] [INFO] Tests run: 15, Failures: 0, Errors: 0, Skipped: 0 [INFO] [INFO] [INFO] ---