...
For prior notes in this release series, see Version Notes 2.3.16.1
- If you are a Maven user, you might want to get started using the Maven Archetype.
- Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.
Code Block |
---|
| xml |
---|
| xml |
---|
title | Maven Dependency | xml |
---|
|
<dependency>
<groupId>org.apache.struts</groupId>
<artifactId>struts2-core</artifactId>
<version>2.3.16.2</version>
</dependency>
|
...
Code Block |
---|
language | bash |
---|
title | Struts Archetype Catalog |
---|
|
mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/
|
Code Block |
---|
| xml |
---|
| xml |
---|
title | Staging Repository | xml |
---|
|
<repositories>
<repository>
<id>apache.nexus</id>
<name>ASF Nexus Staging</name>
<url>https://repository.apache.org/content/groups/staging/</url>
</repository>
</repositories> |
Internal Changes
- Upgrades Commons FileUpload to version 1.3.1 to prevent DoS attacks, more details can be found here and here
- Excludes 'class' parameter name to avoid ClassLoader manipulation via ParametersInterceptor
...
Improves excluded params to avoid ClassLoader manipulation via ParametersInterceptor
Adds excluded params to CookieInterceptor to avoid ClassLoader manipulation when the interceptors is configured to accept all cookie names (wildcard matching via "*")
Issue Detail
Issue List
Other resources