You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@struts.apache.org by ku...@apache.org on 2024/04/20 10:01:18 UTC

(struts) 01/01: Merge pull request #916 from apache/WW-5418-struts-sec

This is an automated email from the ASF dual-hosted git repository.

kusal pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git

commit 3c21e8229031e9ef5f8548ae0f5aca8e7436a9a2
Merge: f5cfb88f1 7e9f6e84f
Author: Kusal Kithul-Godage <gi...@kusal.io>
AuthorDate: Sat Apr 20 20:01:06 2024 +1000

    Merge pull request #916 from apache/WW-5418-struts-sec
    
    WW-5418 Forbid Enums and Jasper classes

 .../opensymphony/xwork2/ognl/SecurityMemberAccess.java   | 16 ----------------
 core/src/main/resources/struts-excluded-classes.xml      |  2 ++
 .../com/opensymphony/xwork2/ognl/OgnlValueStackTest.java |  8 ++++----
 .../xwork2/ognl/SecurityMemberAccessTest.java            |  2 +-
 4 files changed, 7 insertions(+), 21 deletions(-)