You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by rg...@apache.org on 2013/05/24 15:52:41 UTC
svn commit: r1486054 -
/struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
Author: rgielen
Date: Fri May 24 13:52:41 2013
New Revision: 1486054
URL: http://svn.apache.org/r1486054
Log:
WW-4063
Improved security by making static method attribute immutable
Modified:
struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
Modified: struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
URL: http://svn.apache.org/viewvc/struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java?rev=1486054&r1=1486053&r2=1486054&view=diff
==============================================================================
--- struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java (original)
+++ struts/struts2/branches/STRUTS_2_3_14_X/xwork-core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java Fri May 24 13:52:41 2013
@@ -32,7 +32,7 @@ import java.util.regex.Pattern;
*/
public class SecurityMemberAccess extends DefaultMemberAccess {
- private boolean allowStaticMethodAccess;
+ private final boolean allowStaticMethodAccess;
Set<Pattern> excludeProperties = Collections.emptySet();
Set<Pattern> acceptProperties = Collections.emptySet();
@@ -45,10 +45,6 @@ public class SecurityMemberAccess extend
return allowStaticMethodAccess;
}
- public void setAllowStaticMethodAccess(boolean allowStaticMethodAccess) {
- this.allowStaticMethodAccess = allowStaticMethodAccess;
- }
-
@Override
public boolean isAccessible(Map context, Object target, Member member,
String propertyName) {