com.day.cq.wcm.foundation.security

Annotation Type ExpressionValidationConfig

public @interface ExpressionValidationConfig

OSGi configuration for Expression Language security validation. This configuration controls whether EL expressions are validated for security vulnerabilities.

Optional Element Summary

Optional Elements

Modifier and Type	Optional Element and Description
boolean	enableValidation Enable or disable Expression Language security validation.

Element Detail

enableValidation

public abstract boolean enableValidation

Enable or disable Expression Language security validation. When enabled, EL expressions will be validated against dangerous patterns and keywords before evaluation to prevent injection attacks.

Returns:

true to enable validation (recommended), false to disable

Default:

true