[jira] [Created] (WW-5115) Reduce logging for DMI excluded parameters

["Greg Huber (Jira)" <ji...@apache.org>]

Greg Huber created WW-5115:
------------------------------

             Summary: Reduce logging for DMI excluded parameters 
                 Key: WW-5115
                 URL: https://issues.apache.org/jira/browse/WW-5115
             Project: Struts 2
          Issue Type: Improvement
          Components: Core
    Affects Versions: 2.5.25
            Reporter: Greg Huber


There are unnecessary log warning when DMI is enabled, from the ParametersInterceptor.  eg property 'action:myAction!save' should not be considered as a bean/property parameter, as its used as part of DMI to submit the form.

WARN  com.opensymphony.xwork2.interceptor.ParametersInterceptor ParametersInterceptor:isAccepted - Parameter [action:myAction!save] didn't match accepted pattern [[\w+((\.\w+)|(\[\d+])|(\(\d+\))|(\['(\w|[\u4e00-\u9fa5])+'])|(\('(\w|[\u4e00-\u9fa5])+'\)))*]]! See Accepted / Excluded patterns at https://struts.apache.org/security/#accepted--excluded-patterns

Any property which matches the DMI method invocation "^(action|method):.*" needs to be silently ignored and not logged.




--
This message was sent by Atlassian Jira
(v8.3.4#803005)