This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git
commit 9b4301c495c882d233417c14c65ac0061ab6ca67
Author: Lukasz Lenart <lukaszlen...@apache.org>
AuthorDate: Thu Jun 21 08:20:11 2018 +0200
Adds more general exclusion
---
core/src/main/resources/struts-default.xml | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/core/src/main/resources/struts-default.xml
b/core/src/main/resources/struts-default.xml
index 417e6d8..84605fa 100644
--- a/core/src/main/resources/struts-default.xml
+++ b/core/src/main/resources/struts-default.xml
@@ -49,7 +49,7 @@
ognl.ClassResolver,
ognl.TypeConverter,
ognl.MemberAccess,
- com.opensymphony.xwork2.ognl.SecurityMemberAccess,
+ ognl.DefaultMemberAccess,
com.opensymphony.xwork2.ActionContext" />
<!-- this must be valid regex, each '.' in package name must be escaped!
-->
@@ -69,7 +69,9 @@
freemarker.ext.beans.,
sun.misc.,
sun.reflect.,
- javassist." />
+ javassist.,
+ com.opensymphony.xwork2.ognl.,
+ com.opensymphony.xwork2.security." />
<bean class="com.opensymphony.xwork2.ObjectFactory" name="struts"/>
<bean type="com.opensymphony.xwork2.factory.ResultFactory" name="struts"
class="org.apache.struts2.factory.StrutsResultFactory" />
