struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "zhouyanming (JIRA)" <j...@apache.org>
Subject [jira] [Created] (WW-4765) Remove all TextParseUtil.translateVariables(message, valueStack) from LocalizedTextUtil
Date Tue, 21 Mar 2017 02:15:41 GMT
zhouyanming created WW-4765:
-------------------------------

             Summary: Remove all TextParseUtil.translateVariables(message, valueStack) from
LocalizedTextUtil
                 Key: WW-4765
                 URL: https://issues.apache.org/jira/browse/WW-4765
             Project: Struts 2
          Issue Type: Improvement
          Components: Core
            Reporter: zhouyanming
            Priority: Critical


Some messages are origin from client which could be malicious, We must close this door. recent
S2-045 S2-046 was sufferer.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message