Return-Path: X-Original-To: apmail-struts-dev-archive@www.apache.org Delivered-To: apmail-struts-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 13CC011470 for ; Fri, 23 May 2014 12:27:52 +0000 (UTC) Received: (qmail 37856 invoked by uid 500); 23 May 2014 12:27:51 -0000 Delivered-To: apmail-struts-dev-archive@struts.apache.org Received: (qmail 37811 invoked by uid 500); 23 May 2014 12:27:51 -0000 Mailing-List: contact dev-help@struts.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Struts Developers List" Reply-To: "Struts Developers List" Delivered-To: mailing list dev@struts.apache.org Received: (qmail 37803 invoked by uid 99); 23 May 2014 12:27:51 -0000 Received: from minotaur.apache.org (HELO minotaur.apache.org) (140.211.11.9) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 23 May 2014 12:27:51 +0000 Received: from localhost (HELO mail-yh0-f44.google.com) (127.0.0.1) (smtp-auth username lukaszlenart, mechanism plain) by minotaur.apache.org (qpsmtpd/0.29) with ESMTP; Fri, 23 May 2014 12:27:51 +0000 Received: by mail-yh0-f44.google.com with SMTP id b6so4158401yha.31 for ; Fri, 23 May 2014 05:27:50 -0700 (PDT) X-Received: by 10.236.168.42 with SMTP id j30mr6513337yhl.101.1400848070778; Fri, 23 May 2014 05:27:50 -0700 (PDT) MIME-Version: 1.0 Received: by 10.170.194.130 with HTTP; Fri, 23 May 2014 05:27:30 -0700 (PDT) In-Reply-To: <43490E9500634D88896AF2D3495F97B4@black> References: <3C465C13-19A9-4AEA-9F6E-C6D4C2A6A263@silbergrau.com> <43490E9500634D88896AF2D3495F97B4@black> From: Lukasz Lenart Date: Fri, 23 May 2014 14:27:30 +0200 Message-ID: Subject: Re: [struts-dev] Re: Ultimate way to solve problems with Ognl To: Struts Developers List Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable 2014-05-23 14:09 GMT+02:00 Jason Pyeron : > Third config param ActionPackageTLDAllow. I am terrible at names and this= may be > a rabbit hole but I think it is a good hole to explore. > > ActionPackageTLDAllow=3D-1 //disable > ActionPackageTLDAllow=3D0 //allows any package bad value to use > ActionPackageTLDAllow=3D2 //default shipping with struts > ActionPackageTLDAllow=3D5 > > If actions are in us.pdinc.customer.com.foo.actions.* > And it is set to 2, then us.pdinc.* would be allowed or if set to 5 then > us.pdinc.customer.com.foo.* would be allowed. hm... this is a good idea in case of calling actions or actions' methods (DMI) but not on so low level. Regards --=20 =C5=81ukasz + 48 606 323 122 http://www.lenart.org.pl/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org For additional commands, e-mail: dev-help@struts.apache.org