[s2] Struts 2 and OGNL findings