struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Anurag kumar"<>
Subject Struts 2.3.31 is excluding generic object.
Date Tue, 31 Jan 2017 15:32:46 GMT

My Action class  returns generic object and It was working fine with struts 2.3.16 but after
upgrading with struts 2.3.31. It is excluding generic object.
I found <constant name="struts.excludedClasses"> constant in struts-default.xml while
searching. Here java.lang.Object is excluded. My concern is if I am overriding this constant
in my struts.xml file after removing java.lang.Object .Will it have a huge impact on security?


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message