You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Anurag kumar <an...@gmail.com> on 2017/01/31 15:32:46 UTC

Struts 2.3.31 is excluding generic object.

Hi,

My Action class  returns generic object and It was working fine with struts 2.3.16 but after upgrading with struts 2.3.31. It is excluding generic object.
I found <constant name="struts.excludedClasses"> constant in struts-default.xml while searching. Here java.lang.Object is excluded. My concern is if I am overriding this constant in my struts.xml file after removing java.lang.Object .Will it have a huge impact on security?


Thanks
Anurag

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Re: Struts 2.3.31 is excluding generic object.

Posted by Lukasz Lenart <lu...@apache.org>.
2017-02-02 11:28 GMT+01:00 Anurag kumar <an...@gmail.com>:
> I have created generic Action variable i.e. T model , which I am using in struts.xml to resolve my dynamic results.

I don't really get it, can you post an example?


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Re: Struts 2.3.31 is excluding generic object.

Posted by Anurag kumar <an...@gmail.com>.

On 2017-02-02 01:00 (+0530), Lukasz Lenart <lu...@apache.org> wrote: 
> 2017-01-31 16:32 GMT+01:00 Anurag kumar <an...@gmail.com>:
> > Hi,
> >
> > My Action class  returns generic object and It was working fine with struts 2.3.16 but after upgrading with struts 2.3.31. It is excluding generic object.
> > I found <constant name="struts.excludedClasses"> constant in struts-default.xml while searching. Here java.lang.Object is excluded. My concern is if I am overriding this constant in my struts.xml file after removing java.lang.Object .Will it have a huge impact on security?
> 
> What do you mean by "returns a generic object"?
> 
> 
> Regards
> -- 
> \u0141ukasz
> + 48 606 323 122 http://www.lenart.org.pl/
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
> 
> 



I have created generic Action variable i.e. T model , which I am using in struts.xml to resolve my dynamic results.

Thanks,
Anurag



---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org


Re: Struts 2.3.31 is excluding generic object.

Posted by Lukasz Lenart <lu...@apache.org>.
2017-01-31 16:32 GMT+01:00 Anurag kumar <an...@gmail.com>:
> Hi,
>
> My Action class  returns generic object and It was working fine with struts 2.3.16 but after upgrading with struts 2.3.31. It is excluding generic object.
> I found <constant name="struts.excludedClasses"> constant in struts-default.xml while searching. Here java.lang.Object is excluded. My concern is if I am overriding this constant in my struts.xml file after removing java.lang.Object .Will it have a huge impact on security?

What do you mean by "returns a generic object"?


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org