Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-05 14:47:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

WW-5364 Add Struts components to allowlist

Browse Source
This commit is contained in:
Kusal Kithul-Godage
2023-11-24 21:32:24 +11:00
parent ee442db9ed
commit 39c3e332d7
3 changed files with 34 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/showcase/src/main/resources/struts.xml
+12
View File
@@ -35,6 +35,18 @@
<constant name="struts.action.extension" value="action,," />
<constant name="struts.allowlist.enable" value="true" />
<constant name="struts.allowlist.classes"
value="
org.apache.struts2.showcase.model.Employee,
org.apache.struts2.showcase.model.Skill,
org.apache.struts2.showcase.conversion.Address,
org.apache.struts2.showcase.conversion.Person,
org.apache.struts2.showcase.conversion.OperationsEnum,
org.apache.struts2.showcase.UITagExample$Language,
org.apache.struts2.showcase.UITagExample$VehicalType,
org.apache.struts2.showcase.UITagExample$VehicalSpecific
"/>
<constant name="struts.convention.package.locators.basePackage" value="org.apache.struts2.showcase" />
<constant name="struts.convention.result.path" value="/WEB-INF" />