1
0
mirror of synced 2026-05-22 21:33:16 +00:00

SEC-1456: Set rtexprvalue=true for "url" attribute in access tag to allow dynamic values (such as URL of current page).

This commit is contained in:
Luke Taylor
2010-04-21 17:29:27 +01:00
parent def5f88c8c
commit dada047e04
2 changed files with 2 additions and 2 deletions
@@ -32,7 +32,7 @@
<attribute>
<name>url</name>
<required>false</required>
<rtexprvalue>false</rtexprvalue>
<rtexprvalue>true</rtexprvalue>
<description>
A URL within the application. If the user has access to this URL (as determined by
the AccessDecisionManager), the tag body will be evaluated. If not, it will
@@ -32,7 +32,7 @@
<attribute>
<name>url</name>
<required>false</required>
<rtexprvalue>false</rtexprvalue>
<rtexprvalue>true</rtexprvalue>
<description>
A URL within the application. If the user has access to this URL (as determined by
the AccessDecisionManager), the tag body will be evaluated. If not, it will