struts.parameters.requireAnnotations=true
to block all parameters globally.@Retention(value=RUNTIME) @Target(value=TYPE) @Deprecated public @interface BlockByDefault
Action
class
are NOT permitted to be set from HttpRequest parameters.
To allow access to a field it must be annotated with Allowed
Copyright © 2000–2024 Apache Software Foundation. All rights reserved.