mirror of https://github.com/apache/struts.git synced 2026-08-11 01:27:14 +00:00

Files

T

Lukasz Lenart f644ea54e2 WW-5618 feat(json): add configurable limits to JSON plugin for DoS prevention (#1626 )

Add configurable limits to the JSON plugin to prevent denial-of-service
attacks via malicious JSON payloads. Limits are enforced directly in the
existing JSONReader class without breaking backward compatibility (no
interface extraction or class renames).

New configurable constants (struts-plugin.xml defaults):
- struts.json.maxElements (10000) - per-container element count
- struts.json.maxDepth (64) - maximum nesting depth
- struts.json.maxLength (2097152) - maximum input length in chars
- struts.json.maxStringLength (262144) - maximum string value length
- struts.json.maxKeyLength (512) - maximum object key length

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-21 12:11:22 +01:00

src

WW-5618 feat(json): add configurable limits to JSON plugin for DoS prevention (#1626 )

2026-03-21 12:11:22 +01:00

pom.xml

Sets a proper SNAPSHOT version before next release (#1615 )

2026-03-09 10:24:37 +01:00

README.md

WW-4440 Adds basic README.md to all submodules

2022-10-27 12:53:05 +02:00

README.md

Struts 2 JFreeChart plugin

The JSON plugin provides a json result type that serializes actions into JSON. You will find more details in documentation.

Installation

Just drop this plugin JAR into WEB-INF/lib folder or add it as a Maven dependency.