WW-5627 Gate CookieInterceptor through ParameterAuthorizer#1681

Merged

lukaszlenart merged 11 commits into

mainfrom

WW-5627-cookie-authorization

May 18, 2026

Commits on May 14, 2026

WW-5627 add ParameterAllowlister interface and STRUTS_PARAMETER_ALLOWLISTER constant

lukaszlenart
and
claude
committed
WW-5627 add OgnlParameterAllowlister default implementation

lukaszlenart
and
claude
committed
WW-5627 register ParameterAllowlister bean in struts-default DI
lukaszlenart
committed
WW-5627 delegate ParametersInterceptor OGNL allowlisting to OgnlParameterAllowlister

lukaszlenart
and
claude
committed
WW-5627 test(cookie): failing test for unannotated setter skip

lukaszlenart
and
claude
committed
WW-5627 gate CookieInterceptor cookie injection through ParameterAuthorizer
lukaszlenart
committed
WW-5627 cover CookieInterceptor authorization matrix in CookieInterceptorAnnotationTest
lukaszlenart
committed
WW-5627 docs(cookie): document new 5-arg extension hook and deprecation
lukaszlenart
committed
WW-5627 wire OgnlParameterAllowlister in StrutsParameterAnnotationTest fixture
lukaszlenart
committed
WW-5627 address SonarCloud findings on PR #1681
lukaszlenart
committed
WW-5627 clarify ParameterAllowlister contract and tidy ParametersInterceptor
lukaszlenart
committed