This is an automated email from the ASF dual-hosted git repository.
kusal pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/struts.git
from f989f370b Merge pull request #789 from
apache/issue/WW-5363-velocity-order
add bef976917 WW-5350 Implement OGNL Allowlist capability
add b4fbc0f0d Merge branch 'master' into WW-5350-allowlist-2
add 9f45983da Merge pull request #781 from apache/WW-5350-allowlist-2
No new revisions were added by this update.
Summary of changes:
.../com/opensymphony/xwork2/ognl/OgnlUtil.java | 78 ++++++++++++++++++----
.../opensymphony/xwork2/ognl/OgnlValueStack.java | 3 +
.../xwork2/ognl/SecurityMemberAccess.java | 56 ++++++++++++++--
.../java/org/apache/struts2/StrutsConstants.java | 6 ++
.../xwork2/ognl/SecurityMemberAccessTest.java | 77 +++++++++++++++++++++
5 files changed, 203 insertions(+), 17 deletions(-)