Struts Misconfiguration: Missing Forward Name

Abstract

如果 <forward> 标签缺少 name 属性，往往表示遗留调试代码或印刷错误。

Explanation

<forward> 标签必须包含 name 和 path 属性。若无名称，将永远不会使用 forward。

示例 1：以下 <forward> 标签包含空 name 属性。


    <forward name="" path="/results.jsp"/>

References

[1] Apache Struts 1.3 Specification

[2] Standards Mapping - OWASP API 2023 API8 Security Misconfiguration

[3] Standards Mapping - OWASP Mobile 2014 M1 Weak Server Side Controls

[4] Standards Mapping - OWASP Top 10 2013 A5 Security Misconfiguration

[5] Standards Mapping - OWASP Top 10 2017 A6 Security Misconfiguration

[6] Standards Mapping - OWASP Top 10 2021 A05 Security Misconfiguration

desc.config.java.struts_misconfiguration_missing_forward_name