https://struts.apache.org/security/#proactively-protect-from-ognl-expression-injections-attacks-if-easily-applicable