Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The following additional interceptor-ref configuration , suggested by John Wilander, should mitigate the problem when applied correctly, allowing only simple navigational expression:

Code Block
<interceptor-ref name="params">
	<param name="acceptParamNames">\w+((\.\w+)|(\[\d+\])|(\['\w+'\]))*</param>
</interceptor-ref>

...