> > Added a note to docs (I thought there was one already) - in your case > > the problem is with a constructor, its target is evaluated to > > java.lang.Class which is on the excluded list of classes. > > > > https://cwiki.apache.org/confluence/display/WW/Security#Security- > Internalsecuritymechanism > > I have extended the description as there is one more case in which > application can blow up :-) > > https://cwiki.apache.org/confluence/display/WW/Security#Security- > OGNLisusedtocallaction'smethods > >
This is good to know - might bite me again Regards, Christoph This Email was scanned by Sophos Anti Virus