kusalk commented on PR #763: URL: https://github.com/apache/struts/pull/763#issuecomment-1752720997
I think many applications make use of the VarRef functionality (including any application that uses Action or Set Struts components) so no it wouldn't make sense to block by default. But by removing this dependency in UIBean, for applications that don't use this functionality, they can block it completely. I've got a list of other nodes that we probably can block by default (which I'm still compiling) - I think we can introduce that in 7.0. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@struts.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
