You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@struts.apache.org by "Lukasz Lenart (Jira)" <ji...@apache.org> on 2025/09/24 07:27:00 UTC

[jira] [Updated] (WW-4498) Replace excludeParams with additionalExcludeParams in ParametersInterceptor

     [ https://issues.apache.org/jira/browse/WW-4498?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lukasz Lenart updated WW-4498:
------------------------------
    Fix Version/s: 7.2.0
                       (was: 7.1.0)

> Replace excludeParams with additionalExcludeParams in ParametersInterceptor
> ---------------------------------------------------------------------------
>
>                 Key: WW-4498
>                 URL: https://issues.apache.org/jira/browse/WW-4498
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core Interceptors
>    Affects Versions: 2.3.24
>            Reporter: Lukasz Lenart
>            Priority: Major
>             Fix For: 7.2.0
>
>
> {{excludeParams}} override params defined in {{DefaultExcludedPatternsChecker}} which can be unsafe, it would be better to allow users only add additional params. If they want to replace params they can reimplement {{DefaultExcludedPatternsChecker}} or use dedicated constant.
> This approach should allow override params per stack not only globally.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)