Versions Compared

Old Version 5

changes.mady.by.user Lukasz Lenart

Saved on

compared with

New Version 6

changes.mady.by.user Lukasz Lenart

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The Apache Struts frameworks when forced, performs double evaluation of attributes' values assigned to certain tags so it is possible to pass in a value that will be evaluated again when a tag's attributes will be rendered.

...

Adding a proper validation of each value that's coming in and it's used in tag's attributes. Or don't use forced evaluation of attribute using %{...} syntax. Alternatively upgrade to Struts 2.3.27.

...