Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

...

  • If you are a Maven user, you might want to get started using the Maven Archetype.
  • Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.
Code Block
xml
xml
titleMaven Dependencyxml
<dependency>
  <groupId>org.apache.struts</groupId>
  <artifactId>struts2-core</artifactId>
  <version>2.3.20.1</version>
</dependency>

...

Code Block
languagetext
titleStruts Archetype Catalog
mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/
Code Block
xml
xml
titleStaging Repositoryxml
<repositories>
  <repository>
    <id>apache.nexus</id>
    <name>ASF Nexus Staging</name>
    <url>https://repository.apache.org/content/groups/staging/</url>
  </repository>
</repositories>

Internal Changes

  • (warning) Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3

 

Note

This release contains fix related to S2-024 security bulletin, please read it carefully!

Note

Please read information about new internal security mechanism introduced with this version, it can have impact on your application! With version 2.3.20 new internal security mechanism was introduced, if you were setting excludeParams in your struts.xml you should remove it as this overlaps those patterns defined by the framework itself. Read more here.

Note

This release contains fix related to S2-024 security bulletin, please read it carefully!

Issue Detail

Issue List

...