angler-fishThe Vulnerability History Project

Disable eval expressions

      git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/branches/STRUTS_2_3_14_X@1469249 13f79535-47bb-0310-9956-ffa450edef68
by Angelo the Ragdoll 2013-04-18 09:49:41 UTC
commit 7e6f641ebb142663cbd1653dc49bed725edf7f56
Struts Fix OGNL Injection via Double-Eval CVE-2013-1965 Fix OGNL URL Injection CVE-2013-1966 VCC CVE-2016-3087 VCC CVE-2016-4438
core/src/main/java/org/apache/struts2/StrutsConstants.java
-3
core/src/main/java/org/apache/struts2/config/BeanSelectionProvider.java
-1
xwork-core/src/main/java/com/opensymphony/xwork2/XWorkConstants.java
-1
xwork-core/src/main/java/com/opensymphony/xwork2/config/impl/DefaultConfiguration.java
-1
xwork-core/src/main/java/com/opensymphony/xwork2/config/providers/XWorkConfigurationProvider.java
-1
xwork-core/src/main/java/com/opensymphony/xwork2/ognl/OgnlUtil.java
+13 -39
expand_less