struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lukasz Lenart <lukaszlen...@apache.org>
Subject Re: [struts-dev] Re: Ultimate way to solve problems with Ognl
Date Fri, 23 May 2014 12:27:30 GMT
2014-05-23 14:09 GMT+02:00 Jason Pyeron <jpyeron@pdinc.us>:
> Third config param ActionPackageTLDAllow. I am terrible at names and this may be
> a rabbit hole but I think it is a good hole to explore.
>
> ActionPackageTLDAllow=-1 //disable
> ActionPackageTLDAllow=0 //allows any package bad value to use
> ActionPackageTLDAllow=2 //default shipping with struts
> ActionPackageTLDAllow=5
>
> If actions are in us.pdinc.customer.com.foo.actions.*
> And it is set to 2, then us.pdinc.* would be allowed or if set to 5 then
> us.pdinc.customer.com.foo.* would be allowed.

hm... this is a good idea in case of calling actions or actions'
methods (DMI) but not on so low level.


Regards
-- 
Ɓukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message