Hi
looks like OGNL allowlist capability is indeed the issue
Thanks
2025年3月5日(水) 16:43 Lukasz Lenart <lukaszlen...@apache.org>:
>
> śr., 5 mar 2025 o 09:12 楊茗閏 <draco...@gmail.com> napisał(a):
> >
> > Hi
> > I am immigrating Struts from 2.13.x to 7.0.3 for a very old project.
> > The project has its own taglib following the Struts style and uses
> > Freemarker for the template.
> > However, I am not able to get ${attributes} in the freemarker template.
> > I have not changed the structure of my taglib class and just updated
> > the dependency packages.
> > Inside my Java file I can see the addParameter adds the value to
> > attributes and evaluateParams() has been called,
> > but they are not accessible in the ftl files.
> > Any tips where should I start looking at my problem?
>
> This can be related to stronger security options. I would enable
> devMode plus increase log level to DEBUG to see if there are some log
> messages around this.
> You can also disable those security options to check if they are
> source of the problem
> https://cwiki.apache.org/confluence/display/WW/Struts+6.x.x+to+7.x.x+migration#Struts6.x.xto7.x.xmigration-OGNLallowlistcapability
>
>
> Cheers
> Łukasz
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
> For additional commands, e-mail: user-h...@struts.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org
