struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lukasz Lenart (JIRA)" <>
Subject [jira] [Updated] (WW-4214) Rename of struts token attribute name
Date Fri, 11 Apr 2014 10:24:18 GMT


Lukasz Lenart updated WW-4214:

    Fix Version/s:     (was: 2.3.18)

> Rename of struts token attribute name
> -------------------------------------
>                 Key: WW-4214
>                 URL:
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Other
>    Affects Versions:,
>            Reporter: mahendran
>            Priority: Critical
>              Labels: struts.token, token
>             Fix For: 2.5.x
> we are using struts 2.0.5, and migrating to to get the security patches.
> During that time we noticed, the default token attribute name is changed from 'struts.token'
to 'token'. Also this information is not published in change logs.
> This change impacts the application uses the custom token interceptor, where application
get the token value from request using request.getParameter("struts.token");
> I request to provide a constant value to keep the default token name to maintain struts.xml
> This provides the generic approach to define the token attribute name during the implementation
> otherwise this is painful to change the token name at each jsp pages.
> currently we are using <s:token/> the generated token name is struts.token
> The same code generates the token name as 'token' in struts
> there are two options left to us.
> 1. change the <s:token/> to <s:token name="struts.token"/>
> 2. keep the old version of token.class in
> The better approach is 
> create a constant to maintain the token name at struts.xml.

This message was sent by Atlassian JIRA

View raw message