These are the notes for the Struts 2.3.28 distribution.
For prior notes in this release series, see Version Notes 2.3.20
<dependency> <groupId>org.apache.struts</groupId> <artifactId>struts2-core</artifactId> <version>2.3.28</version> </dependency> |
You can also use Struts Archetype Catalog like below
mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/ |
<repositories> <repository> <id>apache.nexus</id> <name>ASF Nexus Staging</name> <url>https://repository.apache.org/content/groups/staging/</url> </repository> </repositories> |
I18NInterceptor
narrows selected locale to those available in JVM to reduce possibility of another XSS vulnerability, see more details in S2-030Configurationprovider
type was introduced - ServletContextAwareConfigurationProvider, see WW-4410HttpHeaders
isn't ignored anymore, see WW-4545BeanPostProcessor(s)
are called only once to constructed objects., see WW-4554MessageStoreInterceptor
was refactored to use PreResultListener
to store messages, see WW-4605@TilesDefinition
, see WW-4606
This release contains fix related to S2-028, S2-029 and S2-030 security bulletins, please read it carefully! |