You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by lu...@apache.org on 2014/08/06 12:37:23 UTC

git commit: WW-4166 Uses .get instead [] to avoid potential security issues

Repository: struts
Updated Branches:
  refs/heads/develop 16e240b4a -> 52481bd56


WW-4166 Uses .get instead [] to avoid potential security issues


Project: http://git-wip-us.apache.org/repos/asf/struts/repo
Commit: http://git-wip-us.apache.org/repos/asf/struts/commit/52481bd5
Tree: http://git-wip-us.apache.org/repos/asf/struts/tree/52481bd5
Diff: http://git-wip-us.apache.org/repos/asf/struts/diff/52481bd5

Branch: refs/heads/develop
Commit: 52481bd56dd70ddcb68a737c5724037ed9adbc83
Parents: 16e240b
Author: Lukasz Lenart <lu...@apache.org>
Authored: Wed Aug 6 12:36:54 2014 +0200
Committer: Lukasz Lenart <lu...@apache.org>
Committed: Wed Aug 6 12:36:54 2014 +0200

----------------------------------------------------------------------
 core/src/main/resources/template/simple/dynamic-attributes.ftl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/struts/blob/52481bd5/core/src/main/resources/template/simple/dynamic-attributes.ftl
----------------------------------------------------------------------
diff --git a/core/src/main/resources/template/simple/dynamic-attributes.ftl b/core/src/main/resources/template/simple/dynamic-attributes.ftl
index 485c20c..0c751b7 100644
--- a/core/src/main/resources/template/simple/dynamic-attributes.ftl
+++ b/core/src/main/resources/template/simple/dynamic-attributes.ftl
@@ -23,7 +23,7 @@
 <#if (parameters.dynamicAttributes?? && parameters.dynamicAttributes?size > 0)><#rt/>
 <#assign aKeys = parameters.dynamicAttributes.keySet()><#rt/>
 <#list aKeys as aKey><#rt/>
-  <#assign keyValue = parameters.dynamicAttributes[aKey]/>
+  <#assign keyValue = parameters.dynamicAttributes.get(aKey)/>
   <#if keyValue?is_string>
       <#assign value = struts.translateVariables(keyValue)!keyValue/>
   <#else>