XSS Vulnerability in Struts 2 before 2.2.3

[Sarr, Nathan]

Hello,

 

   I noticed the solution mentions turning off DMI support in
struts.xml.  Would the same result be achieved by setting it in the
struts.properties file:

 

# don't allow dynamic method invocation 

struts.enable.DynamicMethodInvocation = false

 

Thanks,

-Nate