Versions Compared

Old Version 5

changes.mady.by.user Unknown User (lukaszlenart)

Saved on

compared with

New Version Current

changes.mady.by.user Unknown User (lukaszlenart)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Avoid using forced OGNL evaluation on untrusted user input, and/or upgrade to Struts 2.5.26 which checks if expression evaluation won't lead to the double evaluation.

...

No issues expected when upgrading to Struts 2.5.26

Workaround

Do no not use forced OGNL evaluation in the tag's attributes based on untrusted/unvalidated user input, please follow out recommendations from the Security Guide.