Versions Compared

Old Version 40

changes.mady.by.user David Mansfield

Saved on

compared with

New Version 41

changes.mady.by.user David Mansfield

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The default behaviour of allowing access to static methods (via an expression like "@org.somewhere.FooUtls@fooMethod()") has been disabled for security reasons in the 2.1 branch. See https://issues.apache.org/struts/browse/WW-2160 for details. You should either remove these cases, or re-enable the use of static methods explicitly in your configuration by using the struts.ognl.allowStaticMethodAccess property.

Reduce verbose logging

Struts 2.1 introduces more verbose logging than Struts 2.0. While extremely valuable, some users may find these annoying.

...