This is an automated email from the ASF dual-hosted git repository.
kusal pushed a change to branch WW-5364-populate-allowlist
in repository https://gitbox.apache.org/repos/asf/struts.git
from 33a5b2927 WW-5364 Modify XmlDocConfigurationProvider to be able to
load into allowlist
add d708fb77a WW-5364 Make allowlist classloader specific
add 141591afe WW-5364 Implement provider allowlist
add af758a5f1 WW-5364 Inject ProviderAllowlist into SecurityMemberAccess
No new revisions were added by this update.
Summary of changes:
.../xwork2/config/impl/DefaultConfiguration.java | 2 +
.../StrutsDefaultConfigurationProvider.java | 2 +
.../providers/XmlDocConfigurationProvider.java | 17 +++++++--
.../xwork2/ognl/SecurityMemberAccess.java | 16 ++++++--
.../opensymphony/xwork2/util/ConfigParseUtil.java | 11 +++++-
.../org/apache/struts2/ognl/ProviderAllowlist.java | 43 ++++++++++++++++++++++
core/src/main/resources/struts-beans.xml | 1 +
core/src/main/resources/struts-default.xml | 2 -
8 files changed, 83 insertions(+), 11 deletions(-)
create mode 100644
core/src/main/java/org/apache/struts2/ognl/ProviderAllowlist.java
