Adds additional classes to be excluded
Project: http://git-wip-us.apache.org/repos/asf/struts/repo Commit: http://git-wip-us.apache.org/repos/asf/struts/commit/96542871 Tree: http://git-wip-us.apache.org/repos/asf/struts/tree/96542871 Diff: http://git-wip-us.apache.org/repos/asf/struts/diff/96542871 Branch: refs/heads/develop Commit: 965428711572ad52d3713b3432ff38e1dd3e9dae Parents: bbcc601 Author: Lukasz Lenart <lukaszlen...@apache.org> Authored: Wed Jun 18 08:45:56 2014 +0200 Committer: Lukasz Lenart <lukaszlen...@apache.org> Committed: Wed Jun 18 08:45:56 2014 +0200 ---------------------------------------------------------------------- core/src/main/resources/struts-default.xml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/struts/blob/96542871/core/src/main/resources/struts-default.xml ---------------------------------------------------------------------- diff --git a/core/src/main/resources/struts-default.xml b/core/src/main/resources/struts-default.xml index 49eba90..ea2a631 100644 --- a/core/src/main/resources/struts-default.xml +++ b/core/src/main/resources/struts-default.xml @@ -42,13 +42,17 @@ value=" java.lang.Object, java.lang.Runtime, + java.lang.System, + java.lang.Class, + java.lang.ClassLoader, + java.lang.Shutdown, ognl.OgnlContext, ognl.MemberAccess, ognl.ClassResolver, ognl.TypeConverter, com.opensymphony.xwork2.ActionContext" /> <!-- this must be valid regex, each '.' in package name must be escaped! --> - <constant name="struts.excludedPackageNamePatterns" value="^java\.lang.*,^ognl.*,^javax.*" /> + <constant name="struts.excludedPackageNamePatterns" value="^java\.lang\..*,^ognl.*,^javax.*" /> <bean class="com.opensymphony.xwork2.ObjectFactory" name="struts"/> <bean type="com.opensymphony.xwork2.factory.ResultFactory" name="struts" class="org.apache.struts2.factory.StrutsResultFactory" />
