struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lukasz Lenart (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (WW-4094) struts.allowed.action.names inconsistency
Date Thu, 06 Jun 2013 05:34:25 GMT

    [ https://issues.apache.org/jira/browse/WW-4094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13676714#comment-13676714
] 

Lukasz Lenart edited comment on WW-4094 at 6/6/13 5:33 AM:
-----------------------------------------------------------

This can be easily solved by setting the regex as below:
{code:xml}
<constant name"struts.allowed.action.names" value="[a-zA-Z0-9._!/\-]*"/>
{code}

Thus will be the new default ;-)
                
      was (Author: lukaszlenart):
    This can be easily solved by setting the regexo as below:
{code:xml}
<constant name"struts.allowed.action.names" value="[a-zA-Z0-9._!/\-]*"/>
{code}

Thus will be the new default ;-)
                  
> struts.allowed.action.names inconsistency
> -----------------------------------------
>
>                 Key: WW-4094
>                 URL: https://issues.apache.org/jira/browse/WW-4094
>             Project: Struts 2
>          Issue Type: Bug
>    Affects Versions: 2.3.14.3
>            Reporter: Andreas Sachs
>            Priority: Minor
>
> I think there is a inconsistency in DefaultActionMapper.cleanupActionName
> According to http://struts.apache.org/development/2.x/docs/s2-015.html struts.allowed.action.names
defines a regex the action name must match.
> The default regex is: [a-z]*[A-Z]*[0-9]*[.\-_!/]*
> I have an action with the name "core_blz"
> This action name does not match the regex (underscore is not at the end)(maybe the default
value should be changed).
> DefaultActionMapper reports Action [#0] do not match allowed action names pattern [#1],
cleaning it up!
> But the cleaned action name is still core_blz.
> If this function is only to remove suspicious characters, then the warning should not
be displayed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message