I’m experimenting with enhancing security by setting a value for 
struts.ognl.expressionMaxLength. I checked all of the OGNL expressions in the 
application, and the longest expression length is 65, so I set the max to 99:

<constant name="struts.ognl.expressionMaxLength" value="99" />


At run-time, that expression (with length 65) fails with this error message:

OgnlValueStack - Could not evaluate this expression due to security 
constraints: [participant.checklist >= 2 && participant.surveyResponse == null]


Is the expression being expanded somehow during evaluation?


Thanks,
Ralph Grove





---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additional commands, e-mail: user-h...@struts.apache.org

Reply via email to