Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-07 15:46:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

WW-5364 Enable allowlist for showcase

Browse Source
This commit is contained in:
Kusal Kithul-Godage
2023-11-24 20:12:17 +11:00
parent 3bf3e5f8db
commit ee442db9ed
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/showcase/src/main/resources/struts.xml
+1
View File
@@ -33,6 +33,7 @@
<constant name="struts.configuration.xml.reload" value="false" />
<constant name="struts.custom.i18n.resources" value="globalMessages" />
<constant name="struts.action.extension" value="action,," />
<constant name="struts.allowlist.enable" value="true" />
<constant name="struts.convention.package.locators.basePackage" value="org.apache.struts2.showcase" />
<constant name="struts.convention.result.path" value="/WEB-INF" />
core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java
+1
View File
@@ -856,6 +856,7 @@ public class OgnlUtil {
}
SecurityMemberAccess memberAccess = container.getInstance(SecurityMemberAccess.class);
memberAccess.useEnforceAllowlistEnabled(Boolean.FALSE.toString());
if (devMode) {
if (!warnReported.get()) {