[ https://issues.apache.org/jira/browse/WW-4540?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14952714#comment-14952714 ]
zhouyanming commented on WW-4540: --------------------------------- I don't use xml for action, I am using one xml for base package, then use my own PackageProvider scan action classes, those package extends base package in xml which already strict-method-invocation="false", and pkgConfig.strictMethodInvocation(false) in java. > Enable Strict DMI by default > ---------------------------- > > Key: WW-4540 > URL: https://issues.apache.org/jira/browse/WW-4540 > Project: Struts 2 > Issue Type: Improvement > Components: Core Actions > Reporter: Lukasz Lenart > Assignee: Lukasz Lenart > Fix For: 2.5 > > > Struts 2 already supports {{Strict DMI}} but it's disabled by default. > {{Strict DMI}} should be always enable to allow access only specific methods. -- This message was sent by Atlassian JIRA (v6.3.4#6332)