Repository: struts
Updated Branches:
  refs/heads/master 47a415ac5 -> ad367777c


Adds additional packages to be excluded from evaluation


Project: http://git-wip-us.apache.org/repos/asf/struts/repo
Commit: http://git-wip-us.apache.org/repos/asf/struts/commit/1a8111e0
Tree: http://git-wip-us.apache.org/repos/asf/struts/tree/1a8111e0
Diff: http://git-wip-us.apache.org/repos/asf/struts/diff/1a8111e0

Branch: refs/heads/master
Commit: 1a8111e0ea8d5183b830ea73352a2e0b0cbe3d86
Parents: 47a415a
Author: Lukasz Lenart <lukaszlen...@apache.org>
Authored: Thu Feb 2 11:37:05 2017 +0100
Committer: Lukasz Lenart <lukaszlen...@apache.org>
Committed: Thu Feb 2 11:37:05 2017 +0100

----------------------------------------------------------------------
 core/src/main/resources/struts-default.xml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/struts/blob/1a8111e0/core/src/main/resources/struts-default.xml
----------------------------------------------------------------------
diff --git a/core/src/main/resources/struts-default.xml 
b/core/src/main/resources/struts-default.xml
index 005714d..a6f69a2 100644
--- a/core/src/main/resources/struts-default.xml
+++ b/core/src/main/resources/struts-default.xml
@@ -60,7 +60,16 @@
     <!-- constant name="struts.excludedPackageNamePatterns" 
value="^java\.lang\..*,^ognl.*,^(?!javax\.servlet\..+)(javax\..+)" / -->
 
     <!-- this is simpler version of the above used with string comparison -->
-    <constant name="struts.excludedPackageNames" 
value="java.lang.,ognl,javax,freemarker.core,freemarker.template" />
+    <constant name="struts.excludedPackageNames"
+              value="
+                java.lang.,
+                ognl.,
+                javax,
+                freemarker.core.,
+                freemarker.template.,
+                freemarker.ext.,
+                sun.reflect.,
+                javassist." />
 
     <bean class="com.opensymphony.xwork2.ObjectFactory" name="struts"/>
     <bean type="com.opensymphony.xwork2.factory.ResultFactory" name="struts" 
class="org.apache.struts2.factory.StrutsResultFactory" />

Reply via email to