Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

Hi, I have the same question. I have one form with two submit tags and if setting the constant 'struts.mapper.action.prefix.enabled' can bring security issues what is the possible solution? Thanks, André Gomes -- View this message in context: http://struts.1045723.n5.nabble.com/security-im

Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

2013/11/26 Miguel Almeida : > Picking up on this topic, I noticed that disabling this feature will > break any JSPs where you've set the action in the tag instead > of the tag. > > This is particularly problematic in situations where for some reason > you have one form with two submit tags, sinc

Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

Dear Miguel! Thank you very much for your thoughts on the problem and your feedback! Keep the good work up! Al the best! krassen Am 26.11.13 10:19, schrieb Miguel Almeida: > Picking up on this topic, I noticed that disabling this feature will > break any JSPs where you've set the action in the

Re: security impact after enabling back the "action:" prefix in Struts 2.3.15.3

Picking up on this topic, I noticed that disabling this feature will break any JSPs where you've set the action in the tag instead of the tag. This is particularly problematic in situations where for some reason you have one form with two submit tags, since the submit is the only place where yo

security impact after enabling back the "action:" prefix in Struts 2.3.15.3

Dear Struts2 mailing list, i have the following question(s)/ i need the following advice: by default the "action:" prefix is set to false in Struts2 v2.3.15.3 as to: http://struts.apache.org/release/2.3.x/docs/s2-018 for security reasons, but i need to set it back to true(i.e. the struts.mapper.ac