Skip to main content

Find static OGNL method access

org.openrewrite.java.struts.search.FindStaticOgnlMethodAccess

Find OGNL expressions that use static method access (e.g., @com.app.Util@makeCode()), which is disabled by default in Struts 6 for security reasons. These expressions need to be migrated to use action instance methods instead.

Recipe source​

This recipe is only available to users of Moderne.

This recipe is available under the Moderne Proprietary License.

Example​

Before​
index.jsp
<html>
    <body>
        <s:property value="@com.app.Util@makeCode()" />
    </body>
</html>
After​
index.jsp
<html>
    <body>
        <s:property <!--~~>-->value="@com.app.Util@makeCode()" />
    </body>
</html>

Usage​

This recipe has no required configuration options. Users of Moderne can run it via the Moderne CLI.

You will need to have configured the Moderne CLI on your machine before you can run the following command.

shell
mod run . --recipe FindStaticOgnlMethodAccess

If the recipe is not available locally, then you can install it using:

mod config recipes jar install org.openrewrite.recipe:rewrite-struts:0.25.1

See how this recipe works across multiple open-source repositories​

Run this recipe on OSS repos at scale with the Moderne SaaS.

The community edition of the Moderne platform enables you to easily run recipes across thousands of open-source repositories.

Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.

Data Tables​

Static OGNL method access​

org.openrewrite.java.struts.table.StaticOgnlMethodAccess

Locations where OGNL expressions use static method access, which is disabled by default in Struts 6.

Column NameDescription
Source fileThe source file containing the OGNL expression.
OGNL expressionThe full OGNL expression containing the static method access.
Static classThe fully qualified class name being accessed statically.
Static methodThe static method being called.