g0w6y commented on PR #1774: URL: https://github.com/apache/struts/pull/1774#issuecomment-4951122295
Pushed a fix for the gaps above (redacted creator-bound construction failures now fail closed instead of throwing, with regression tests for the other creator styles) — and since this is an authz bypass, should it go through a security advisory like #1775/#1776? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
