The Vulnerability History Project

WW-3860

      Restrict accepted parameter name length
Thanks to Johno Crawford for the patch.

git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1368841 13f79535-47bb-0310-9956-ffa450edef68

by Jill the Mastiff 2012-08-03 09:16:47 UTC

commit 80e03182d66d9e6ab18f9a9a9b3c42725a1c89e9

Struts Fix LongParameterNameDenialOfServi CVE-2012-4387

xwork-core/src/main/java/com/opensymphony/xwork2/interceptor/ParametersInterceptor.java

+5 -35

xwork-core/src/test/java/com/opensymphony/xwork2/interceptor/ParametersInterceptorTest.java

+1 -33

expand_less