THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
<repositories> <repository> <id>apache.nexus</id> <name>ASF Nexus Staging</name> <url>https://repository.apache.org/content/groups/staging/</url> </repository> </repositories> |
- The DTD has been updated to provide whitelisting of functions that can be called via Dynamic Method Invocation, via the <allowed-methods> tag inside <action>. (The method specified in the <action> tag is automatically whitelisted.) For example, the following XML allows methods foo, bar, and baz to be called via DMI:
...
<action name="..." method="foo">
<result ... />
<allowed-methods>bar,baz</allowed-methods>
</action>
Internal Changes
- A security vulnerability has been fixed: User input was evaluated as an OGNL expression when there's a conversion error.
Internal Changes
- New Portal 2 Plugin replaced the old one Portal Plugin
- OGNL was upgraded to version 3.0.2 to solve problem with running Struts 2 on JDK 5