Hi, I'm analyzing the security changes for a migration from Struts 6.3 to Struts 7.0.
One thing I'm wondering about is the StrutsParameter annotation that now needs to be added to all getters and setters that need to be accessed from the OGNL context. We have a number of Actions where we have getters and setters for POJO objects, and sometimes those POJOs have getters and setters for nested POJO objects as well, and sometimes this goes on for quite a number of levels. Do all these getters and setters on POJO objects need that annotation as well? Or is there a way we can just annotate the Action level getters and setters and it will handle all levels, even if it is a recursive situation where the number of levels is not known at compile time? Another question I have: do s:url tags automatically handle the namespace resolution changes? Or will we need to add an explicit namespace to all our s:url tags? I'm not even sure what's meant with a namespace in this context. Is this related to the Request Context (the first part of the url after the domain)? Or is this something different? Kind regards, Nate
