[jira] [Commented] (WW-4429) struts.ognl.allowStaticMethodAccess is not working for static method

["Lukasz Lenart (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WW-4429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14242464#comment-14242464 ] 

Lukasz Lenart commented on WW-4429:
-----------------------------------

Please read this [topic|http://markmail.org/message/e4atc5qjqwromrs6] and this [instruction|https://cwiki.apache.org/confluence/display/WW/Security#Security-Accessingstaticmethods] which is mentioned in the version notes.

> struts.ognl.allowStaticMethodAccess is not working for static method
> --------------------------------------------------------------------
>
>                 Key: WW-4429
>                 URL: https://issues.apache.org/jira/browse/WW-4429
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core Actions
>    Affects Versions: 2.3.20
>            Reporter: Tom Nguyen
>              Labels: xwork
>             Fix For: 2.3.x
>
>
> Setting <constant name="struts.ognl.allowStaticMethodAccess" value="true"/> in struts.xml can only allow access to static fields but not static methods
> for example 
> <s:property value="@java.util.Calendar@DAY_OF_WEEK"/> is working
> But 
> <s:property value="@com.your.full.package.Classname@methodName(optionalParameters)" /> not working
> This feature used to work in struts-2.3.16.3, but not working after upgrade to struts-2.3.20



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)