Re: Preventing OGNL evaluations of user input (was Re: Struts 2 performance)

[Antonio Petrelli]

2007/7/16, Ing. Andrea Vettori <[EMAIL PROTECTED]>:

> so currently (without patches),
> <s:property value="propName" />  just prints the "propName"
> property,  but
> <s:property value="%{propName}" /> evaluates the expression in %{}
> and if
> propName=amout, it prints the "amout" property?
>

No, <s:property value="%{propName}"/> should be equivalent to
<s:property value="propName"/>.

Mmm I think that I (me, myself) have to learn the basics of OGNL :-)

Sorry
Antonio