struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From chengas123 <benjamin.j.mcc...@gmail.com>
Subject Re: [struts] Escaping Characters in Struts Property Tag
Date Wed, 14 Nov 2007 14:47:06 GMT

Ahh, yes, that was my problem.  I'm afraid I wasn't expecting that.  I don't
really see how allowing static method access presents a security problem.  I
am opening myself up to any obvious risks by turning this on?

Thanks,
Ben



DNewfield wrote:
> 
> 
> Have you turned off this capability (or rather not turned it back on)?
> struts.ognl.allowStaticMethodAccess
> https://issues.apache.org/struts/browse/WW-2160
> 
> -Dale
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Escaping-Characters-in-Struts-Property-Tag-tf4799846.html#a13747747
Sent from the Struts - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Mime
View raw message