[ https://issues.apache.org/jira/browse/WW-5268?focusedWorklogId=847957&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-847957 ]
ASF GitHub Bot logged work on WW-5268: -------------------------------------- Author: ASF GitHub Bot Created on: 28/Feb/23 07:26 Start Date: 28/Feb/23 07:26 Worklog Time Spent: 10m Work Description: lukaszlenart merged PR #660: URL: https://github.com/apache/struts/pull/660 Issue Time Tracking ------------------- Worklog Id: (was: 847957) Time Spent: 0.5h (was: 20m) > Add configuration option to exempt classes from OGNL package exclusions > ----------------------------------------------------------------------- > > Key: WW-5268 > URL: https://issues.apache.org/jira/browse/WW-5268 > Project: Struts 2 > Issue Type: Improvement > Components: Core > Reporter: Kusal Kithul-Godage > Priority: Minor > Fix For: 6.2.0 > > Time Spent: 0.5h > Remaining Estimate: 0h > > It is currently possible to exclude packages from OGNL evaluation using > `struts.excludedPackageNamePatterns` and `struts.excludedPackageNames`. > There may exist a scenario where you wish to have certain packages > excluded/blocklisted by default, but exempt specific classes from these > packages that have been assessed to be safe. -- This message was sent by Atlassian Jira (v8.20.10#820010)