Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Constant nameDescription
struts.i18n.search.defaultbundles.firstAllows search in default bundles first, read more in the docs
struts.ui.escapeHtmlBodyEnables escaping body of a tag, read more in the docs

Limited expression length

As from Struts 6.0.0 the OGNL expression length is limited to 256 characters by default. Longer expressions can be consider harmful to application security, please read a dedicated section in the Security guideline.

Tag escape behaviour

After migrating to the latest Freemarker (which enables auto-escaping by default) you should stop using ?html in your custom tags and freemarker based pages. Also when embedding a tag in <s:a>, <s:submit> and <s:component> tags like in the example below:

...