[ https://issues.apache.org/jira/browse/WW-4540?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14952608#comment-14952608 ]
Lukasz Lenart commented on WW-4540: ----------------------------------- {code:xml} <?xml version="1.0" encoding="UTF-8" ?> <!DOCTYPE struts PUBLIC "-//Apache Software Foundation//DTD Struts Configuration 2.5//EN" "http://struts.apache.org/dtds/struts-2.5.dtd"> <struts> <package strict-method-invocation="false"> ... </package </struts> {code} https://cwiki.apache.org/confluence/display/WW/Action+Configuration#ActionConfiguration-StrictMethodInvocation > Enable Strict DMI by default > ---------------------------- > > Key: WW-4540 > URL: https://issues.apache.org/jira/browse/WW-4540 > Project: Struts 2 > Issue Type: Improvement > Components: Core Actions > Reporter: Lukasz Lenart > Assignee: Lukasz Lenart > Fix For: 2.5 > > > Struts 2 already supports {{Strict DMI}} but it's disabled by default. > {{Strict DMI}} should be always enable to allow access only specific methods. -- This message was sent by Atlassian JIRA (v6.3.4#6332)