[ https://issues.apache.org/jira/browse/WW-5349?focusedWorklogId=884018&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-884018 ]
ASF GitHub Bot logged work on WW-5349: -------------------------------------- Author: ASF GitHub Bot Created on: 09/Oct/23 10:08 Start Date: 09/Oct/23 10:08 Worklog Time Spent: 10m Work Description: kusalk commented on PR #763: URL: https://github.com/apache/struts/pull/763#issuecomment-1752720997 I think many applications make use of the VarRef functionality (including any application that uses Action or Set Struts components) so no it wouldn't make sense to block by default. But by removing this dependency in UIBean, for applications that don't use this functionality, they can block it completely. I've got a list of other nodes that we probably can block by default (which I'm still compiling) - I think we can introduce that in 7.0. Issue Time Tracking ------------------- Worklog Id: (was: 884018) Time Spent: 40m (was: 0.5h) > Remove core dependency on ognl.ASTVarRef > ---------------------------------------- > > Key: WW-5349 > URL: https://issues.apache.org/jira/browse/WW-5349 > Project: Struts 2 > Issue Type: Improvement > Components: Core > Reporter: Kusal Kithul-Godage > Priority: Minor > Fix For: 6.4.0 > > Time Spent: 40m > Remaining Estimate: 0h > -- This message was sent by Atlassian Jira (v8.20.10#820010)