struts-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Lukasz Lenart <lukaszlen...@apache.org>
Subject Re: Struts 2.3.31 is excluding generic object.
Date Sun, 12 Mar 2017 16:51:08 GMT
2017-03-12 15:57 GMT+01:00 Yasser Zamani <yasser.zamani@live.com>:
> Hi Anurag,
>
> I hope it's not too late but I have some comments.
>
> Today we updated to Struts2.3.32 to fix security issue S2-045.
>
> After that, similar to your problem, we lost following OGNL evaluation
> to null in our JSPs :(
>
> "%{#context['com.opensymphony.xwork2.dispatcher.HttpServletRequest'].requestURI}"

This is strange, this can only happen if you used OGNL 3.1.14 or
3.0.20 [1] but this wasn't part of Struts 2.3.32

https://github.com/jkuhnert/ognl#release-notes---version-3114-3020


Regards
-- 
Ɓukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Mime
View raw message