angler-fishThe Vulnerability History Project

WW-3264 add allowed-methods configuration for action

      git-svn-id: https://svn.apache.org/repos/asf/struts/struts2/trunk@1133947 13f79535-47bb-0310-9956-ffa450edef68
by Calvin the Civet 2011-06-09 15:43:04 UTC
commit f54afdc3f441dc48d012aebd3cbbdcd542811cee
Struts VCC Forced Double OGNL Evaluation CVE-2016-4461
core/src/main/java/org/apache/struts2/config/StrutsXMLConfigurationProvider.java
-1
core/src/main/resources/struts-2.3.dtd
-152
core/src/main/resources/struts-default.xml
+2 -2
pom.xml
-2
xwork-core/src/main/java/com/opensymphony/xwork2/DefaultActionProxy.java
+1 -1
xwork-core/src/main/java/com/opensymphony/xwork2/config/entities/ActionConfig.java
+7 -14
xwork-core/src/main/java/com/opensymphony/xwork2/config/entities/PackageConfig.java
+7 -17
xwork-core/src/main/java/com/opensymphony/xwork2/config/providers/XmlConfigurationProvider.java
+14 -37
xwork-core/src/main/resources/xwork-2.3.dtd
-130
xwork-core/src/test/java/com/opensymphony/xwork2/config/providers/XmlConfigurationProviderAllowedMethodsTest.java
-133
xwork-core/src/test/resources/com/opensymphony/xwork2/config/providers/xwork-test-allowed-methods.xml
-48
expand_less