You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@grails.apache.org by GitBox <gi...@apache.org> on 2026/07/02 01:29:44 UTC

[GH] (grails-core/feat/secure-bind-data): Workflow run "SiteMesh 2 Compatibility" failed!

The GitHub Actions job "SiteMesh 2 Compatibility" on grails-core.git/feat/secure-bind-data has failed.
Run started by GitHub user borinquenkid (triggered by borinquenkid).

Head commit for run:
755daa848f0a324a0cf9034708badaddebd54b4a / Walter Duque de Estrada <wb...@mac.com>
Add failing regression tests for secureBindData review findings

Proves four issues found during review of the secure data binding
feature with red tests before fixing them:
- the compile-time allowedParams check accepts a list built from
  request data instead of requiring a literal
- an indexed collection path beyond autoGrowCollectionLimit crashes
  DataBindingUtils.getIndexedValue during nullMissing processing
- a non-numeric indexed bracket against a List property crashes the
  pre-existing SimpleDataBinder indexed-property parsing, reachable
  via both plain bindData and secureBindData nullMissing

Co-Authored-By: Claude Sonnet 5 <no...@anthropic.com>

Report URL: https://github.com/apache/grails-core/actions/runs/28556870915

With regards,
GitHub Actions via GitBox