You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@struts.apache.org by johnou <gi...@git.apache.org> on 2013/05/21 16:40:34 UTC

struts2 pull request: Disable eval expressions and simple jstl accessibilit...

GitHub user johnou opened a pull request:

    https://github.com/apache/struts2/pull/5

    Disable eval expressions and simple jstl accessibility

    afaik the simple jstl accessibility is used only in jsp. Currently we have a hacky interceptor to disable it, would be nice if it were an option.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/johnou/struts2 disable_simple_jstl_accessibility

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/struts2/pull/5.patch

----
commit d4c4e615bee50884838f1b8f928106378afa5de2
Author: Maurizio Cucchiara <mc...@apache.org>
Date:   2013-04-18T09:49:41Z

    Disable eval expressions
    
    git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/branches/STRUTS_2_3_14_X@1469249 13f79535-47bb-0310-9956-ffa450edef68

commit bbaab4e50fefb3be092071bf43c905ff05ce0383
Author: Johno Crawford <jo...@bytenibble.com>
Date:   2013-05-21T13:38:15Z

    Add option for disabling JSTL accessibility.

----


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org