This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a change to branch WW-5659-lazy-params-request-scoping
in repository https://gitbox.apache.org/repos/asf/struts.git
from ac4676db5 WW-5659 chore(core): harden the policy sets and tidy the
lazy params dispatch
add eaca05d62 WW-5659 fix(core): allowlist the lazy params holder for OGNL
member access
add d77739b74 WW-5659 test(core): prove lazy params resolve with the OGNL
allowlist enabled
add bfb4fbaa5 WW-5659 fix(core): stop an unresolvable disabled param from
voiding the upload policy
No new revisions were added by this update.
Summary of changes:
.../struts2/factory/DefaultInterceptorFactory.java | 59 +++++++++-
.../apache/struts2/interceptor/DisableParams.java | 7 ++
.../apache/struts2/interceptor/UploadPolicy.java | 14 ++-
.../ActionFileUploadInterceptorTest.java | 29 +++++
.../interceptor/LazyParamsAllowlistTest.java | 123 +++++++++++++++++++++
5 files changed, 224 insertions(+), 8 deletions(-)
create mode 100644
core/src/test/java/org/apache/struts2/interceptor/LazyParamsAllowlistTest.java
