I would suggest moving this expression into Java code, into "bean" -
this is then easy to cover with a unit test.
śr., 25 maj 2022 o 14:52 i...@flyingfischer.ch
napisał(a):
>
> Besides incrementing or disabling this arbitrary limit with
>
>
>
> You may also work with a most ugly hack by defining
Besides incrementing or disabling this arbitrary limit with
You may also work with a most ugly hack by defining a variable in your jsp
and then use this very short variables in your too long OGNL expression.
Ugly, does add to code complexity and increases the overall failure
rate.But may h
You may use this in Struts.xml
You need to find you longest OGNL value, discipline yourself to shorten
those, rethink you variable name length or disable this completly
Not that much of a convincing approach to improve security, but maybe
better than not. I did not like it at all, but
I will have others longer than this, is there an override on the length?
On 25/05/2022 13:34, Lukasz Lenart wrote:
śr., 25 maj 2022 o 14:22 Greg Huber napisał(a):
Would there have been any changes to the validator?
This is now not working:
unspecified
key
śr., 25 maj 2022 o 14:22 Greg Huber napisał(a):
>
> Would there have been any changes to the validator?
>
> This is now not working:
>
>
>
> unspecified
> key
>
OGNL expression max length has been defined by default to 256
characters, the above has 351
https://issue
Would there have been any changes to the validator?
This is now not working:
unspecified
key
It works on RC3.
It is odd as the validator is still working on other fields.
On 24/05/2022 13:25, Lukasz Lenart wrote:
Hello,
This is another RC (I hope the last one) o
lukaszlenart merged PR #555:
URL: https://github.com/apache/struts/pull/555
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscr...@struts.apach
hboutemy opened a new pull request, #555:
URL: https://github.com/apache/struts/pull/555
see last releases rebuild results:
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/struts/README.md
--
This is an automated message from the Apache Git Service.
