Re: Re: Re: Re: Re: Re: Struts 7: action class finder

Lukasz Lenart <[email protected]>
Newsgroups gmane.comp.jakarta.struts.devel
Message-ID <CAMopvkP3EW1gdk_FFt+u-ae0+Fz_6ZiR1pGtrgDQqK1CswZxJA@mail.gmail.com>
śr., 15 sty 2025 o 08:51 Florian Schlittgen <[email protected]> napisał(a):
>
> On 15.01.25 08:25, Lukasz Lenart wrote:
> > I assume you jar
> > contains only Convention based actions?
> Yes, they are all Convention based actions.
> Sorry, I didn't had the time to do more testing. If you want me to try
> something out, just let me know.

I wonder if this isn't related to allowlist functionality related
https://cwiki.apache.org/confluence/display/WW/Struts+6.x.x+to+7.x.x+migration#Struts6.x.xto7.x.xmigration-OGNLallowlistcapability

Could you try to define struts.allowlist.packageNames or disable it
struts.allowlist.enable=false? I meant we are probably missing
something around this when loading actions from JARs, as the allowlist
are dynamically updated based on convention mechanism


Regards
Lukasz
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.