CNG/WebRoot/WEB-INF/classes/struts-login.xml

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE struts PUBLIC

    "-//Apache Software Foundation//DTD Struts Configuration 2.5//EN"
    "http://struts.apache.org/dtds/struts-2.5.dtd">

<struts>

    <!--<constant name="struts.enable.DynamicMethodInvocation" value="false" />
    <constant name="struts.devMode" value="false" />

    <include file="example.xml"/>
    -->
    <constant name="struts.enable.DynamicMethodInvocation" value="true" />
    <!-- 为修复struts2 s2-016、s2-017漏洞，重写DefaultActionMapper -->  
<bean type="org.apache.struts2.dispatcher.mapper.ActionMapper" name="myDefaultActionMapper" class="com.runzhixing.tool.MyDefaultActionMapper" />     
<constant name="struts.mapper.class" value="myDefaultActionMapper" /> 
    <package name="login" namespace="/" extends="ssl-default,struts-default" strict-method-invocation="false">
       	<action name="validateLogin" class="com.runzhixing.action.LoginAction" method="validateLogin">
       		<result name="success">/jsp/rzx/bgman.jsp</result>
       		<result name="fail">/jsp/fail/loginfail.jsp</result>
       	</action>
    </package>

    <!-- Add packages here -->

</struts>