Skip to content

WW-5623 fix(core): HTML-encode form action in PostbackResult to prevent XSS #1701

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lukaszlenart wants to merge 1 commit into
base: support/struts-6-x-x
Choose a base branch
from
+105 −1

WW-5623 fix(core): HTML-encode form action in PostbackResult to preve…

90751ff
Select commit
Loading
Failed to load commit list.
Open

WW-5623 fix(core): HTML-encode form action in PostbackResult to prevent XSS #1701

WW-5623 fix(core): HTML-encode form action in PostbackResult to preve…
90751ff
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded May 20, 2026 in 2m 42s

Quality Gate passed

Issues
13 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Annotations

Check warning on line 229 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq8&open=AZ5EL55PpmbvQSOQFgq8&pullRequest=1701

Check warning on line 199 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq3&open=AZ5EL55PpmbvQSOQFgq3&pullRequest=1701

Check warning on line 155 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ValueStack"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq0&open=AZ5EL55PpmbvQSOQFgq0&pullRequest=1701

Check warning on line 236 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq-&open=AZ5EL55PpmbvQSOQFgq-&pullRequest=1701

Check warning on line 206 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq6&open=AZ5EL55PpmbvQSOQFgq6&pullRequest=1701

Check warning on line 173 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq2&open=AZ5EL55PpmbvQSOQFgq2&pullRequest=1701

Check warning on line 236 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq9&open=AZ5EL55PpmbvQSOQFgq9&pullRequest=1701

Check warning on line 154 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgqy&open=AZ5EL55PpmbvQSOQFgqy&pullRequest=1701

Check warning on line 154 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgqz&open=AZ5EL55PpmbvQSOQFgqz&pullRequest=1701

Check warning on line 199 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq4&open=AZ5EL55PpmbvQSOQFgq4&pullRequest=1701

Check warning on line 173 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq1&open=AZ5EL55PpmbvQSOQFgq1&pullRequest=1701

Check warning on line 206 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionInvocation"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq5&open=AZ5EL55PpmbvQSOQFgq5&pullRequest=1701

Check warning on line 229 in core/src/test/java/org/apache/struts2/result/PostbackResultTest.java

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this use of "ActionContext"; it is deprecated. 

See more on https://sonarcloud.io/project/issues?id=apache_struts&issues=AZ5EL55PpmbvQSOQFgq7&open=AZ5EL55PpmbvQSOQFgq7&pullRequest=1701
View more details on SonarQubeCloud