Versions Compared

Old Version 3

changes.mady.by.user Maurizio Cucchiara

Saved on

compared with

New Version Current

changes.mady.by.user Maurizio Cucchiara

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3

...

Code Block
xml
xml
titleStaging Repository
<repositories>
  <repository>
    <id>apache.nexus</id>
    <name>ASF Nexus Staging</name>
    <url>https://repository.apache.org/content/groups/staging/</url>
  </repository>
</repositories>
  • The DTD has been updated to provide whitelisting of functions that can be called via Dynamic Method Invocation, via the <allowed-methods> tag inside <action>. (The method specified in the <action> tag is automatically whitelisted.) For example, the following XML allows methods foo, bar, and baz to be called via DMI:

...


  <action name="..." method="foo">
    <result ... />
    <allowed-methods>bar,baz</allowed-methods>
  </action>

Internal Changes

  • A security vulnerability has been fixed: User input was evaluated as an OGNL expression when there's a conversion error.

Internal Changes

  • New Portal 2 Plugin replaced the old one Portal Plugin
  • OGNL was upgraded to version 3.0.2 to solve problem with running Struts 2 on JDK 5

Issue Detail

...