Change the TLD?

The combination of the two levels of EL is a security risk in some
applications. If you're not worried about it or not affected by it then
it's an easy, if annoying, workaround.

Dave

--- Oleg Mikheev <[EMAIL PROTECTED]> wrote:

> I was trying to upgrade from 2.0.9 to the latest Struts 2 and 
> encountered this issue:
> http://issues.apache.org/struts/browse/WW-2107
> 
> If I have a lot of code like this:
> 
> <s:checkbox
> id="${transactionType}form_qoInceptionPPDO_${forStatus.index}"
>  
> name="qoInceptionPPDO_${forStatus.index}" theme="simple"
>  
> fieldValue="${requestScope[tmpVar]}" value="${not empty renewaledId ?
> 
> false : requestScope[tmpVar]}"
>                                                     onclick="${not
> empty 
> renewaledId ? 'return false' : ''}"
>  
>
onchange="document.getElementById('${transactionType}form_qoInceptionPPDO_${forStatus.index}').value=document.getElementById('${transactionType}form_qoInceptionPPDO_${forStatus.index}').checked"/>
> 
> is there any 'easy' way of making it work with the latest Struts2?
> If there is no easy way I will continue using Struts 2.0.9 since
> trying 
> to port that stuff will become a nightmare.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to