Mailing-List: contact user-help@struts.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Struts Users Mailing List" <user@struts.apache.org>
MIME-Version: 1.0
In-Reply-To: <40B92331-D541-48E4-B23F-18D0A0998890@Newfield.org>
References: <CDAFFF36.3C24D%zoran@sparecreative.com>
 <40B92331-D541-48E4-B23F-18D0A0998890@Newfield.org>
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Wed, 8 May 2013 07:51:17 +0200
Message-ID: 
 <CAMopvkN19sqokX8AFpFr4QRZDw2m4ZqS0nw-L_7taj3z_tviOw@mail.gmail.com>
Subject: Re: Localised text tag
To: Struts Users Mailing List <user@struts.apache.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

Yeah, it looks like a double evaluation which is a bug probably


Regards
--=20
=C5=81ukasz
+ 48 606 323 122 http://www.lenart.org.pl/


2013/5/8 Dale Newfield <dale@newfield.org>:
> It seems like an evaluation of a value, which could be bad, in fact a lar=
ge security hole.  What if that value were "System.exit()"? (I forget my og=
nl...I think you need fully qualified path and a hash or at or something to=
 call static methods, but you get the point.)
>
> -Dale
>
>
> On May 7, 2013, at 11:10 PM, Zoran Avtarovski <zoran@sparecreative.com> w=
rote:
>
>> I have a small issue that I'm trying to resolve and I was hoping the som=
eone
>> might have come across it earlier.
>>
>> I'll try to explain as best I can:
>> I have a number of objects on the value stack:
>> 1. pojo  - a java object with a string attribute called key which links =
to a
>> DB based localised text value
>> 2. movement =C2=AD another java object with a string attribute called st=
rength
>> To display the localised text associated with the pojo key I use the
>> following tag
>>
>> <s:text name=3D"%{pojo.key}" />
>>
>> The problem is that if the key value clashes with another item on the va=
lue
>> stack I don't get the string value.
>> For example if the key value on pojo is "movement.strength" and the stre=
ngth
>> value for movement is "weak" I don't get the expected results. Instead o=
f
>> getting the localised text with key "movement.strength" I get the locali=
sed
>> text with key "weak". I tried setting the searchValueStack property to f=
alse
>> but it made no change.
>>
>> I'd appreciate any help.
>>
>> Z.
>>
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org