Hi there, long long ago, since OGNL is rather at the inconvenient side and I develop my WO projects in Groovy anyway, I've switched to Groovy myself. Works for years without a glitch.
It was not too difficult, though after all those years I can't quite recall the details. If you want me to, I'll check the code and will let you know. (Also, I guess, I should check which parts of OGNL perhaps remained; I can't quite recall that, either :) My goal was simply to allow Groovy scripts in the templates, nothing more.) All the best, OC > On 12. 9. 2025, at 19:13, Ricardo Parada via Webobjects-dev > <webobjects-dev@lists.apple.com> wrote: > > Hi everyone, > > I’ve been told that the ognl library used by WOOgnl has a vulnerability and > that the ognl project is retired and that no fix is planned. > > The recommendation is to migrate to an alternative library or restrict access > to trusted users only. > > Has anybody done this by any chance? > > Thank you > Ricardo Parada > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/webobjects-dev/ocs%40ocs.cz > > This email sent to o...@ocs.cz _______________________________________________ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
