Re: Use Filter or ParameterInteceptors to pevent S2-032

2016-04-27 Thread Lukasz Lenart
2016-04-28 3:59 GMT+02:00 mailinglist rs : > Besides using upgrade or disable Dynamic method invocation, can I use > Filter or ParameterInteceptors to block request parameters which start with > "method:" prefix to prevent S2-032? > Reference: https://struts.apache.org/docs/s2-032.html Yes, you ca

Use Filter or ParameterInteceptors to pevent S2-032

2016-04-27 Thread mailinglist rs
Besides using upgrade or disable Dynamic method invocation, can I use Filter or ParameterInteceptors to block request parameters which start with "method:" prefix to prevent S2-032? Reference: https://struts.apache.org/docs/s2-032.html