[
http://www.stripesframework.org/jira/browse/STS-148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ben Gunter closed STS-148.
--------------------------
> Stripes should not bind values under 'context'
> ----------------------------------------------
>
> Key: STS-148
> URL: http://www.stripesframework.org/jira/browse/STS-148
> Project: Stripes
> Issue Type: Bug
> Components: Validation
> Affects Versions: Release 1.2.2
> Reporter: Tim Fennell
> Assignee: Tim Fennell
> Fix For: Release 1.3
>
>
> If a user knows what's going on and hacks the URL to include parameters under
> 'context.*' then Stripes will bind user input values into the
> ActionBeanContext. This allows the user to inject values into the request,
> session etc. Stripes should ignore all values under 'context'.
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Stripes-development mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/stripes-development
