This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 2fa4a2d Updates production by Jenkins
2fa4a2d is described below
commit 2fa4a2db3ef8ab4dce240629062d3f2c69a511a2
Author: jenkins
AuthorDate: Wed Jan 8 07:45:40 2020 +
Updates production by Jenkins
---
content/core-developers/default-properties.html | 11 +++
content/core-developers/interceptors.html | 17 +++--
content/core-developers/struts-default-xml.html | 17 +++--
content/tag-developers/checkboxlist-tag.html| 2 +-
4 files changed, 34 insertions(+), 13 deletions(-)
diff --git a/content/core-developers/default-properties.html
b/content/core-developers/default-properties.html
index fd6b3ac..447bfa1 100644
--- a/content/core-developers/default-properties.html
+++ b/content/core-developers/default-properties.html
@@ -366,6 +366,17 @@ struts.ognl.enableExpressionCache=true
### Indicates if Dispatcher should handle unexpected exceptions by calling
sendError()
### or simply rethrow it as a ServletException to allow future processing by
other frameworks like Spring Security
struts.handle.exception=true
+
+### Applies maximum length allowed on OGNL expressions for security
enhancement (optional)
+###
+### **WARNING**: If developers enable this option (by configuration) they
should make sure that they understand the implications of setting
+### struts.ognl.expressionMaxLength. They must choose a value large enough
to permit ALL valid OGNL expressions used within the application.
+### Values larger than the 200-400 range have diminishing security value (at
which point it is really only a "style guard" for long OGNL
+### expressions in an application. Setting a value of null or "" will also
disable the feature.
+###
+### NOTE: The sample line below is *INTENTIONALLY* commented out, as this
feature is disabled by default.
+# struts.ognl.expressionMaxLength=256
+
### END SNIPPET: complete_file
diff --git a/content/core-developers/interceptors.html
b/content/core-developers/interceptors.html
index 29e063a..81763ab 100644
--- a/content/core-developers/interceptors.html
+++ b/content/core-developers/interceptors.html
@@ -248,8 +248,8 @@ than reiterate the same list of Interceptors, we can bundle
these Interceptors t
@@ -280,13 +281,21 @@ than reiterate the same list of Interceptors, we can
bundle these Interceptors t
@@ -322,16 +331,13 @@ than reiterate the same list of Interceptors, we can
bundle these Interceptors t
2 matches
Mail list logo