You can add a default action to catch any random hits
<default-action-ref name="Unknown" />
<action name="Unknown" class="xxx.struts.UnknownAction">
<interceptor-ref name="unknownActionStack" />
<result>Error.jsp</result>
</action>
On Tue, May 11, 2010 at 11:34 AM, Mitch Claborn <[email protected]> wrote:
> A security scan on our site is sending a request like
>
> /emailalink!"Xx<XaXaXXaXaX>xX.html
>
> which produces an exception
> com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptor
> com.csc.mm.web.action.EmailLink."Xx<XaXaXXaXaX>xX()
> java.lang.NoSuchMethodException:
> com.csc.mm.web.action.EmailLink."Xx<XaXaXXaXaX>xX()
> at java.lang.Class.getMethod(Unknown Source)
> at
> org.apache.struts2.interceptor.validation.AnnotationValidationInterceptor.getActionMethod(AnnotationValidationInterceptor.java:75)
> at
> org.apache.struts2.interceptor.validation.AnnotationValidationInterceptor.doIntercept(AnnotationValidationInterceptor.java:47)
> at
> com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:87)
> at
> com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:237)
> at
> com.opensymphony.xwork2.interceptor.ConversionErrorInterceptor.intercept(ConversionErrorInterceptor.java:122)
> at
> com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:237)
> at
> com.opensymphony.xwork2.interceptor.ParametersInterceptor.doIntercept(ParametersInterceptor.java:195)
> etc
>
> I'd like to be able to somehow capture those requests into a catch-all or
> default method on the action so that I can do something intelligent, rather
> than just allowing an error page to show up. Is there a way to do this?
>
>
>
> Mitch
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
