Yasser Zamani

These are historical backgrounds to study for who would cracking at this PR: - The closed issue [WW-3582 - Token Interceptor is holding HttpSession lock which can trigger deadlocks](https://issues.apache.org/jira/browse/WW-3582) -...

@apache/struts-committers , I'm going to close this one as already there are users mentioning such things as an information disclosure security issue. objections?

Hm.. I see Lukasz already has mentioned about that and also as mentioned, it should be user-configurable prefix to avoid information disclosure!

Thank you so much @JCgH4164838Gh792C124B5 ! I remember that I also had some same difficulties when I was working on #167 . Finally I simply workaround it by injecting Container...

Thank you so much @JCgH4164838Gh792C124B5 for the explanation! Yes I remember too in past I was observing multiple hits on a breakpoint during injections, provided I expected one hit. Could...

Thank you very much @JCgH4164838Gh792C124B5 ! I've been working on it today. You're right, doesn't work as expected, provided it's added similarly like ActionProxyFactory. I'll work on it in next...

Hi @JCgH4164838Gh792C124B5 sorry I was wrong yesterday. Your sample app works, however you need to apply a few fixes on your previous work which I introduced by #581 - I...

Thank you @JCgH4164838Gh792C124B5 for testing bits! > The subtleties for how the naming/associations for the DI configuration change the behaviour are still a bit mysterious to me For me too....

@JCgH4164838Gh792C124B5 thanks for clarification! LGTM :+1:

@DeepakLalchandani thanks for asking! But please ask in [Struts user mailing list](https://struts.apache.org/mail.html) instead where you will reach very more people (and more related people) than here.