Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • This release fixes a security flaw in the Struts 2 tags where using JSP EL expressions could allow malicious OGNL expressions through.
  • Portlet support has been significantly improved in this release to fix issues related to using several of the pre-bundled Struts 2 interceptors.
  • For other changes, see the JIRA release notes.

API changes

  • The org.apache.struts2.components.Component.determineActionURL signature has changed: now it has two more parameters. Extension developers are invited to modify their code accordingly.

...