THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
For prior notes in this release series, see Version Notes 2.2.3.1
- If you are a Maven user, you might want to get started using the Maven Archetype.
- Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
<repositories> <repository> <id>apache.nexus</id> <name>ASF Nexus Staging</name> <url>https://repository.apache.org/content/groups/staging/</url> </repository> </repositories> |
- The DTD has been updated to provide whitelisting of functions that can be called via Dynamic Method Invocation, via the <allowed-methods> tag inside <action>. (The method specified in the <action> tag is automatically whitelisted.) For example, the following XML allows methods foo, bar, and baz to be called via DMI:
...
<action name="..." method="foo">
<result ... />
<allowed-methods>bar,baz</allowed-methods>
</action>
Internal Changes
- A security vulnerability has been fixed: User input was evaluated as an OGNL expression when there's a conversion error.
Internal Changes
- New Portal 2 Plugin replaced the old one Portal Plugin
- OGNL was upgraded to version 3.0.2 to solve problem with running Struts 2 on JDK 5