Author: lukaszlenart
Date: Fri Jul 15 06:29:45 2016
New Revision: 992866
Log:
Updates production
Added:
websites/production/struts/content/docs/version-notes-2330.html
websites/production/struts/content/docs/version-notes-252.html
Modified:
websites/production/struts/content/announce.html
websites/production/struts/content/archetype-catalog.xml
websites/production/struts/content/docs/migration-guide.html
websites/production/struts/content/docs/s2-035.html
websites/production/struts/content/docs/stream-result.html
websites/production/struts/content/docs/version-notes-2329.html
websites/production/struts/content/docs/webxml.html
websites/production/struts/content/download.html
websites/production/struts/content/downloads.html
websites/production/struts/content/index.html
Modified: websites/production/struts/content/announce.html
==============================================================================
--- websites/production/struts/content/announce.html (original)
+++ websites/production/struts/content/announce.html Fri Jul 15 06:29:45 2016
@@ -124,6 +124,65 @@
Skip to: <a href="announce-2015.html">Announcements - 2015</a>
</p>
+<h4 id="a20160707">7 July 2016 - Struts 2.5.2 General Availability</h4>
+
+<p>The Apache Struts group is pleased to announce that Struts 2.5.2 is
available as a âGeneral Availabilityâ
+release. The GA designation is our highest quality grade.</p>
+
+<p>Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications.
+The framework is designed to streamline the full development cycle, from
building, to deploying,
+to maintaining applications over time.</p>
+
+<p>Struts 2.5.2 release contains several improvements just to mention few of
them:</p>
+
+<ul>
+ <li>SecurityMemberAccess exclude class design issue, see WW-4645</li>
+ <li>Json deserialization does not work in 2.5.1, see WW-4650</li>
+ <li>Negative number is considered an arithmetic expression, see WW-4651</li>
+ <li>Wildcard redirect and path <code
class="highlighter-rouge">/static/</code>, see WW-4656</li>
+ <li>Upgrade commons-fileupload to the latest version, see WW-4648</li>
+ <li>Cleans up logic in <code class="highlighter-rouge">StreamResult</code>
and update docs, see WW-4655</li>
+</ul>
+
+<p><strong>All developers are strongly advised to perform this
action.</strong></p>
+
+<p>The 2.5.x series of the Apache Struts framework has a minimum requirement
of the following specification versions:
+Servlet API 2.4, JSP API 2.0, and Java 7.</p>
+
+<p>Should any issues arise with your use of any version of the Struts
framework, please post your comments
+to the user list, and, if appropriate, file a tracking ticket.</p>
+
+<p>You can download this version from our <a
href="download.html#struts-ga">download</a> page.</p>
+
+<h4 id="a20160707-2">7 July 2016 - Struts 2.3.30 General Availability</h4>
+
+<p>The Apache Struts group is pleased to announce that Struts 2.3.30 is
available as a âGeneral Availabilityâ
+release. The GA designation is our highest quality grade.</p>
+
+<p>Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications.
+The framework is designed to streamline the full development cycle, from
building, to deploying,
+to maintaining applications over time.</p>
+
+<p>This release contains several breaking changes and improvements just to
mention few of them:</p>
+
+<ul>
+ <li>Pre-evaluation of ânameâ attribute stopped working, see WW-4641</li>
+ <li>Unable to retrieve <code class="highlighter-rouge">s:hidden</code> field
values, see WW-4642</li>
+ <li>SecurityMemberAccess exclude class design issue, see WW-4645</li>
+ <li>Negative number is considered an arithmetic expression, see WW-4651</li>
+ <li>Upgrade commons-fileupload to the latest version, see WW-4648</li>
+</ul>
+
+<p><strong>All developers are strongly advised to perform this
action.</strong></p>
+
+<p>The 2.3.x series of the Apache Struts framework has a minimum requirement
of the following specification versions:
+Servlet API 2.4, JSP API 2.0, and Java 6.</p>
+
+<p>Should any issues arise with your use of any version of the Struts
framework, please post your comments
+to the user list, and, if appropriate, file a tracking ticket.</p>
+
+<p>You can download this version from our <a
href="download.html#struts-2330">download</a> page.</p>
+
<h4 id="a20160618">18 June 2016 - Struts 2.5.1 General Availability</h4>
<p>The Apache Struts group is pleased to announce that Struts 2.5.1 is
available as a âGeneral Availabilityâ
Modified: websites/production/struts/content/archetype-catalog.xml
==============================================================================
Binary files - no diff available.
Modified: websites/production/struts/content/docs/migration-guide.html
==============================================================================
--- websites/production/struts/content/docs/migration-guide.html (original)
+++ websites/production/struts/content/docs/migration-guide.html Fri Jul 15
06:29:45 2016
@@ -125,7 +125,7 @@ under the License.
<div class="pagecontent">
<div class="wiki-content">
- <div id="ConfluenceContent"><p>Getting here from there.</p><h3
id="MigrationGuide-VersionNotes2.5.x">Version Notes 2.5.x</h3><ul><li><a
shape="rect" href="version-notes-25.html">Version Notes 2.5</a></li></ul><h3
id="MigrationGuide-VersionNotes2.3.x">Version Notes 2.3.x</h3><ul><li><a
shape="rect" href="version-notes-23281.html">Version Notes
2.3.28.1</a></li><li><a shape="rect" href="version-notes-2328.html">Version
Notes 2.3.28</a></li><li><a shape="rect"
href="version-notes-23243.html">Version Notes 2.3.24.3</a></li><li><a
shape="rect" href="version-notes-23241.html">Version Notes
2.3.24.1</a></li><li><a shape="rect" href="version-notes-2324.html">Version
Notes 2.3.24</a></li><li><a shape="rect"
href="version-notes-23203.html">Version Notes 2.3.20.3</a></li><li><a
shape="rect" href="version-notes-23201.html">Version Notes
2.3.20.1</a></li><li><a shape="rect" href="version-notes-2320.html">Version
Notes 2.3.20</a></li><li><a shape="rect" href="version-notes-23163.html"
>Version Notes 2.3.16.3</a></li><li><a shape="rect"
>href="version-notes-23162.html">Version Notes 2.3.16.2</a></li><li><a
>shape="rect" href="version-notes-2316.html">Version Notes
>2.3.16.1</a></li><li><a shape="rect" href="version-notes-2316.html">Version
>Notes 2.3.16</a></li><li><a shape="rect"
>href="version-notes-23153.html">Version Notes 2.3.15.3</a></li><li><a
>shape="rect" href="version-notes-23152.html">Version Notes
>2.3.15.2</a></li><li><a shape="rect" href="version-notes-23151.html">Version
>Notes 2.3.15.1</a></li><li><a shape="rect"
>href="version-notes-2315.html">Version Notes 2.3.15</a></li><li><a
>shape="rect" href="version-notes-23143.html">Version Notes
>2.3.14.3</a></li><li><a shape="rect" href="version-notes-23142.html">Version
>Notes 2.3.14.2</a></li><li><a shape="rect"
>href="version-notes-23141.html">Version Notes 2.3.14.1</a></li><li><a
>shape="rect" href="version-notes-2314.html">Version Notes
>2.3.14</a></li><li><a shape="rect" href="version-notes-23120.html">Version No
tes 2.3.12.0</a></li><li><a shape="rect" href="version-notes-238.html">Version
Notes 2.3.8</a></li><li><a shape="rect" href="version-notes-237.html">Version
Notes 2.3.7</a></li><li><a shape="rect" href="version-notes-2341.html">Version
Notes 2.3.4.1</a></li><li><a shape="rect" href="version-notes-234.html">Version
Notes 2.3.4</a></li><li><a shape="rect" href="version-notes-233.html">Version
Notes 2.3.3</a></li><li><a shape="rect" href="version-notes-2312.html">Version
Notes 2.3.1.2</a></li><li><a shape="rect"
href="version-notes-2311.html">Version Notes 2.3.1.1</a></li><li><a
shape="rect" href="version-notes-231.html">Version Notes 2.3.1</a></li></ul><h3
id="MigrationGuide-VersionNotes2.2.x">Version Notes 2.2.x</h3><ul><li><a
shape="rect" href="version-notes-2231.html">Version Notes
2.2.3.1</a></li><li><a shape="rect" href="version-notes-223.html">Version Notes
2.2.3</a></li><li><a shape="rect" href="version-notes-2211.html">Version Notes
2.2.1.1</a></li><li><a shape="rect" href="ve
rsion-notes-221.html">Version Notes 2.2.1</a></li></ul><h3
id="MigrationGuide-VersionNotes2.1.x">Version Notes 2.1.x</h3><ul><li><a
shape="rect" href="version-notes-2181.html">Version Notes
2.1.8.1</a></li><li><a shape="rect" href="version-notes-218.html">Version Notes
2.1.8</a></li><li><a shape="rect" href="version-notes-216.html">Version Notes
2.1.6</a></li><li><a shape="rect" href="version-notes-215.html">Version Notes
2.1.5</a></li><li><a shape="rect" href="version-notes-214.html">Version Notes
2.1.4</a></li><li><a shape="rect" href="version-notes-213.html">Version Notes
2.1.3</a></li><li><a shape="rect" href="version-notes-212.html">Version Notes
2.1.2</a></li><li><a shape="rect" href="version-notes-211.html">Version Notes
2.1.1</a></li><li><a shape="rect" href="version-notes-210.html">Version Notes
2.1.0</a></li></ul><h3 id="MigrationGuide-ReleaseNotes2.0.x">Release Notes
2.0.x</h3><ul><li><a shape="rect" href="release-notes-2014.html">Release Notes
2.0.14</a></li><li><a shape
="rect" href="release-notes-2013.html">Release Notes 2.0.13</a></li><li><a
shape="rect" href="release-notes-2012.html">Release Notes 2.0.12</a></li><li><a
shape="rect" href="release-notes-20112.html">Release Notes
2.0.11.2</a></li><li><a shape="rect" href="release-notes-20111.html">Release
Notes 2.0.11.1</a></li><li><a shape="rect"
href="release-notes-2011.html">Release Notes 2.0.11</a></li><li><a shape="rect"
href="release-notes-2010.html">Release Notes 2.0.10</a></li><li><a shape="rect"
href="release-notes-209.html">Release Notes 2.0.9</a></li><li><a shape="rect"
href="release-notes-208.html">Release Notes 2.0.8</a></li><li><a shape="rect"
href="release-notes-207.html">Release Notes 2.0.7</a></li><li><a shape="rect"
href="release-notes-206.html">Release Notes 2.0.6</a></li><li><a shape="rect"
href="release-notes-205.html">Release Notes 2.0.5</a></li><li><a shape="rect"
href="release-notes-204.html">Release Notes 2.0.4</a></li><li><a shape="rect"
href="release-notes-203.html">Relea
se Notes 2.0.3</a></li><li><a shape="rect"
href="release-notes-202.html">Release Notes 2.0.2</a></li><li><a shape="rect"
href="release-notes-201.html">Release Notes 2.0.1</a></li><li><a shape="rect"
href="release-notes-200.html">Release Notes 2.0.0</a></li></ul><h3
id="MigrationGuide-Struts1toStruts2">Struts 1 to Struts 2</h3><div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p><a shape="rect"
href="comparing-struts-1-and-2.html">Comparing Struts 1 and 2</a></p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>How are Struts 1 and Struts 2
alike? How are they different?</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="rect" href="struts-1-solutions.html">Struts 1
Solutions</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Various issues (and hopefully their solutions!)
encountered during migrations to Struts 2.</p></td></tr><tr><th colspan="1"
rowspan="1" class="conflu
enceTh"><p><a shape="rect" href="migration-strategies.html">Migration
Strategies</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Steps and overall strategies for migrating Struts 1
applications to Struts 2.</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="rect" href="migration-tools.html">Migration
Tools</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Development tools to help aid the migration
process.</p></td></tr></tbody></table></div><h4
id="MigrationGuide-Tutorials">Tutorials</h4><div class="table-wrap"><table
class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="rect" class="external-link"
href="http://www.infoq.com/news/migrating-struts2"; rel="nofollow">Migrating
Applications to Struts 2 </a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>A three-part series by Ian Roughley (Sep
2006)</p></td></tr></tbody></table></div><h4
id="MigrationGuide-Roadmap">Roadmap</
h4><div class="table-wrap"><table class="confluenceTable"><tbody><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p><a shape="rect"
class="external-link" href="http://struts.apache.org/roadmap.html#new";>Roadmap
FAQ</a></p></th><td colspan="1" rowspan="1" class="confluenceTd"><p>What's in
store for Struts 2?</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="rect" class="external-link"
href="http://www.oreillynet.com/onjava/blog/2006/10/my_history_of_struts_2.html";
rel="nofollow">A History of Struts 2</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Don Brown's summary of
events</p></td></tr></tbody></table></div><h3
id="MigrationGuide-Webwork2.2toStruts2">Webwork 2.2 to Struts 2</h3><div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p><a shape="rect"
href="key-changes-from-webwork-2.html">Key Changes From WebWork
2</a></p></th><td colspan="1" rowspan="1" class="confluence
Td"><p>What has been removed or changed from WebWork 2.2 to Struts
2</p></td></tr><tr><th colspan="1" rowspan="1" class="confluenceTh"><p><a
shape="rect" href="webwork-2-migration-strategies.html">WebWork 2 Migration
Strategies</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Steps and overall strategies for migrating WebWork 2
applications to Struts 2.</p></td></tr></tbody></table></div><h2
id="MigrationGuide-FAQs">FAQs</h2><ul><li><a shape="rect"
href="where-do-we-get-the-latest-version-the-framework.html">Where do we get
the latest version the framework</a>?</li><li><a shape="rect"
href="what-are-some-of-the-frameworks-best-features.html">What are some of the
framework's best features</a>?</li><li><a shape="rect"
href="what-is-the-actioncontext.html">What is the
ActionContext?</a></li></ul><h2 id="MigrationGuide-Next:">Next: <a shape="rect"
href="contributors-guide.html">Contributors Guide</a></h2></div>
+ <div id="ConfluenceContent"><p>Getting here from there.</p><h3
id="MigrationGuide-VersionNotes2.5.x">Version Notes 2.5.x</h3><ul><li><a
shape="rect" href="version-notes-252.html">Version Notes 2.5.2</a></li><li><a
shape="rect" href="version-notes-251.html">Version Notes 2.5.1</a></li><li><a
shape="rect" href="version-notes-25.html">Version Notes 2.5</a></li></ul><h3
id="MigrationGuide-VersionNotes2.3.x">Version Notes 2.3.x</h3><ul><li><a
shape="rect" href="version-notes-2330.html">Version Notes 2.3.30</a></li><li><a
shape="rect" href="version-notes-2329.html">Version Notes 2.3.29</a></li><li><a
shape="rect" href="version-notes-23281.html">Version Notes
2.3.28.1</a></li><li><a shape="rect" href="version-notes-2328.html">Version
Notes 2.3.28</a></li><li><a shape="rect"
href="version-notes-23243.html">Version Notes 2.3.24.3</a></li><li><a
shape="rect" href="version-notes-23241.html">Version Notes
2.3.24.1</a></li><li><a shape="rect" href="version-notes-2324.html">Version No
tes 2.3.24</a></li><li><a shape="rect" href="version-notes-23203.html">Version
Notes 2.3.20.3</a></li><li><a shape="rect"
href="version-notes-23201.html">Version Notes 2.3.20.1</a></li><li><a
shape="rect" href="version-notes-2320.html">Version Notes 2.3.20</a></li><li><a
shape="rect" href="version-notes-23163.html">Version Notes
2.3.16.3</a></li><li><a shape="rect" href="version-notes-23162.html">Version
Notes 2.3.16.2</a></li><li><a shape="rect"
href="version-notes-2316.html">Version Notes 2.3.16.1</a></li><li><a
shape="rect" href="version-notes-2316.html">Version Notes 2.3.16</a></li><li><a
shape="rect" href="version-notes-23153.html">Version Notes
2.3.15.3</a></li><li><a shape="rect" href="version-notes-23152.html">Version
Notes 2.3.15.2</a></li><li><a shape="rect"
href="version-notes-23151.html">Version Notes 2.3.15.1</a></li><li><a
shape="rect" href="version-notes-2315.html">Version Notes 2.3.15</a></li><li><a
shape="rect" href="version-notes-23143.html">Version Notes 2.3.14.3<
/a></li><li><a shape="rect" href="version-notes-23142.html">Version Notes
2.3.14.2</a></li><li><a shape="rect" href="version-notes-23141.html">Version
Notes 2.3.14.1</a></li><li><a shape="rect"
href="version-notes-2314.html">Version Notes 2.3.14</a></li><li><a shape="rect"
href="version-notes-23120.html">Version Notes 2.3.12.0</a></li><li><a
shape="rect" href="version-notes-238.html">Version Notes 2.3.8</a></li><li><a
shape="rect" href="version-notes-237.html">Version Notes 2.3.7</a></li><li><a
shape="rect" href="version-notes-2341.html">Version Notes
2.3.4.1</a></li><li><a shape="rect" href="version-notes-234.html">Version Notes
2.3.4</a></li><li><a shape="rect" href="version-notes-233.html">Version Notes
2.3.3</a></li><li><a shape="rect" href="version-notes-2312.html">Version Notes
2.3.1.2</a></li><li><a shape="rect" href="version-notes-2311.html">Version
Notes 2.3.1.1</a></li><li><a shape="rect" href="version-notes-231.html">Version
Notes 2.3.1</a></li></ul><h3 id="MigrationGuide
-VersionNotes2.2.x">Version Notes 2.2.x</h3><ul><li><a shape="rect"
href="version-notes-2231.html">Version Notes 2.2.3.1</a></li><li><a
shape="rect" href="version-notes-223.html">Version Notes 2.2.3</a></li><li><a
shape="rect" href="version-notes-2211.html">Version Notes
2.2.1.1</a></li><li><a shape="rect" href="version-notes-221.html">Version Notes
2.2.1</a></li></ul><h3 id="MigrationGuide-VersionNotes2.1.x">Version Notes
2.1.x</h3><ul><li><a shape="rect" href="version-notes-2181.html">Version Notes
2.1.8.1</a></li><li><a shape="rect" href="version-notes-218.html">Version Notes
2.1.8</a></li><li><a shape="rect" href="version-notes-216.html">Version Notes
2.1.6</a></li><li><a shape="rect" href="version-notes-215.html">Version Notes
2.1.5</a></li><li><a shape="rect" href="version-notes-214.html">Version Notes
2.1.4</a></li><li><a shape="rect" href="version-notes-213.html">Version Notes
2.1.3</a></li><li><a shape="rect" href="version-notes-212.html">Version Notes
2.1.2</a></li><li><a
shape="rect" href="version-notes-211.html">Version Notes 2.1.1</a></li><li><a
shape="rect" href="version-notes-210.html">Version Notes 2.1.0</a></li></ul><h3
id="MigrationGuide-ReleaseNotes2.0.x">Release Notes 2.0.x</h3><ul><li><a
shape="rect" href="release-notes-2014.html">Release Notes 2.0.14</a></li><li><a
shape="rect" href="release-notes-2013.html">Release Notes 2.0.13</a></li><li><a
shape="rect" href="release-notes-2012.html">Release Notes 2.0.12</a></li><li><a
shape="rect" href="release-notes-20112.html">Release Notes
2.0.11.2</a></li><li><a shape="rect" href="release-notes-20111.html">Release
Notes 2.0.11.1</a></li><li><a shape="rect"
href="release-notes-2011.html">Release Notes 2.0.11</a></li><li><a shape="rect"
href="release-notes-2010.html">Release Notes 2.0.10</a></li><li><a shape="rect"
href="release-notes-209.html">Release Notes 2.0.9</a></li><li><a shape="rect"
href="release-notes-208.html">Release Notes 2.0.8</a></li><li><a shape="rect"
href="release-notes-207.html">R
elease Notes 2.0.7</a></li><li><a shape="rect"
href="release-notes-206.html">Release Notes 2.0.6</a></li><li><a shape="rect"
href="release-notes-205.html">Release Notes 2.0.5</a></li><li><a shape="rect"
href="release-notes-204.html">Release Notes 2.0.4</a></li><li><a shape="rect"
href="release-notes-203.html">Release Notes 2.0.3</a></li><li><a shape="rect"
href="release-notes-202.html">Release Notes 2.0.2</a></li><li><a shape="rect"
href="release-notes-201.html">Release Notes 2.0.1</a></li><li><a shape="rect"
href="release-notes-200.html">Release Notes 2.0.0</a></li></ul><h3
id="MigrationGuide-Struts1toStruts2">Struts 1 to Struts 2</h3><div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p><a shape="rect"
href="comparing-struts-1-and-2.html">Comparing Struts 1 and 2</a></p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>How are Struts 1 and Struts 2
alike? How are they different?</p></td></tr><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p><a shape="rect"
href="struts-1-solutions.html">Struts 1 Solutions</a></p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Various issues (and hopefully their
solutions!) encountered during migrations to Struts 2.</p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p><a shape="rect"
href="migration-strategies.html">Migration Strategies</a></p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>Steps and overall strategies
for migrating Struts 1 applications to Struts 2.</p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p><a shape="rect"
href="migration-tools.html">Migration Tools</a></p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Development tools to help aid the migration
process.</p></td></tr></tbody></table></div><h4
id="MigrationGuide-Tutorials">Tutorials</h4><div class="table-wrap"><table
class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="r
ect" class="external-link" href="http://www.infoq.com/news/migrating-struts2";
rel="nofollow">Migrating Applications to Struts 2 </a></p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>A three-part series by Ian Roughley (Sep
2006)</p></td></tr></tbody></table></div><h4
id="MigrationGuide-Roadmap">Roadmap</h4><div class="table-wrap"><table
class="confluenceTable"><tbody><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p><a shape="rect" class="external-link"
href="http://struts.apache.org/roadmap.html#new";>Roadmap FAQ</a></p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>What's in store for Struts
2?</p></td></tr><tr><th colspan="1" rowspan="1" class="confluenceTh"><p><a
shape="rect" class="external-link"
href="http://www.oreillynet.com/onjava/blog/2006/10/my_history_of_struts_2.html";
rel="nofollow">A History of Struts 2</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Don Brown's summary of
events</p></td></tr></tbody></table></div><h3 id="Migra
tionGuide-Webwork2.2toStruts2">Webwork 2.2 to Struts 2</h3><div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p><a shape="rect"
href="key-changes-from-webwork-2.html">Key Changes From WebWork
2</a></p></th><td colspan="1" rowspan="1" class="confluenceTd"><p>What has been
removed or changed from WebWork 2.2 to Struts 2</p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p><a shape="rect"
href="webwork-2-migration-strategies.html">WebWork 2 Migration
Strategies</a></p></th><td colspan="1" rowspan="1"
class="confluenceTd"><p>Steps and overall strategies for migrating WebWork 2
applications to Struts 2.</p></td></tr></tbody></table></div><h2
id="MigrationGuide-FAQs">FAQs</h2><ul><li><a shape="rect"
href="where-do-we-get-the-latest-version-the-framework.html">Where do we get
the latest version the framework</a>?</li><li><a shape="rect"
href="what-are-some-of-the-frameworks-best-features.html">What are some of
the framework's best features</a>?</li><li><a shape="rect"
href="what-is-the-actioncontext.html">What is the
ActionContext?</a></li></ul><h2 id="MigrationGuide-Next:">Next: <a shape="rect"
href="contributors-guide.html">Contributors Guide</a></h2></div>
</div>
<div class="tabletitle">
@@ -140,6 +140,18 @@ under the License.
<span class="smalltext">(Apache Struts 2
Documentation)</span>
<br>
$page.link($child)
+ <span class="smalltext">(Apache Struts 2
Documentation)</span>
+ <br>
+ $page.link($child)
+ <span class="smalltext">(Apache Struts 2
Documentation)</span>
+ <br>
+ $page.link($child)
+ <span class="smalltext">(Apache Struts 2
Documentation)</span>
+ <br>
+ $page.link($child)
+ <span class="smalltext">(Apache Struts 2
Documentation)</span>
+ <br>
+ $page.link($child)
<span class="smalltext">(Apache Struts 2
Documentation)</span>
<br>
$page.link($child)
Modified: websites/production/struts/content/docs/s2-035.html
==============================================================================
--- websites/production/struts/content/docs/s2-035.html (original)
+++ websites/production/struts/content/docs/s2-035.html Fri Jul 15 06:29:45 2016
@@ -125,7 +125,7 @@ under the License.
<div class="pagecontent">
<div class="wiki-content">
- <div id="ConfluenceContent"><h2
id="S2-035-Summary">Summary</h2>Action name clean up is error prone<div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p>Who should read this</p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>All Struts 2 developers and
users</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Impact of vulnerability</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Possible wat to craft vulnerable
payload</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Maximum security rating</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Low</p></td></tr><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p>Recommendation</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Upgrade to latest version of the Apache
Struts, 2.3.29 or 2.5.1.</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Affected Software</p></t
h><td colspan="1" rowspan="1" class="confluenceTd"><p>Struts 2.0.0 -
Struts<span style="color: rgb(23,35,59);"> 2.3.28.1</span></p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p>Reporters</p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p><span
class="Apple-tab-span"><span>Alvaro</span> </span>Munoz alvaro dot munoz
at hpe dot com</p><p>Sam Ng samn at hpe dot com</p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p>CVE Identifier</p></th><td
colspan="1" rowspan="1"
class="confluenceTd"><p>CVE-2016-4436</p></td></tr></tbody></table></div><h2
id="S2-035-Problem">Problem</h2><p>The method used to clean up action name can
produce vulnerable payload based on crafted input which can be used by attacker
to perform unspecified attack.</p><h2 id="S2-035-Solution">Solution</h2><p>You
should upgrade to latest Struts version or implement your own version
of <code>ActionMapper</code> based on source code of receomened Struts
versions.</p><h2
id="S2-035-Backwardcompatibility">Backward compatibility</h2><p>No issues
expected when upgrading Struts version.</p><h2
id="S2-035-Workaround">Workaround</h2><p>Implement your own version of clean up
method which will throw an exception.</p><p> </p></div>
+ <div id="ConfluenceContent"><h2
id="S2-035-Summary">Summary</h2>Action name clean up is error prone<div
class="table-wrap"><table class="confluenceTable"><tbody><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p>Who should read this</p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p>All Struts 2 developers and
users</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Impact of vulnerability</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Possible way to craft vulnerable
payload</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Maximum security rating</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Low</p></td></tr><tr><th colspan="1"
rowspan="1" class="confluenceTh"><p>Recommendation</p></th><td colspan="1"
rowspan="1" class="confluenceTd"><p>Upgrade to latest version of the Apache
Struts, 2.3.29 or 2.5.1.</p></td></tr><tr><th colspan="1" rowspan="1"
class="confluenceTh"><p>Affected Software</p></t
h><td colspan="1" rowspan="1" class="confluenceTd"><p>Struts 2.0.0 -
Struts<span style="color: rgb(23,35,59);"> 2.3.28.1</span></p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p>Reporters</p></th><td
colspan="1" rowspan="1" class="confluenceTd"><p><span
class="Apple-tab-span"><span>Alvaro</span> </span>Munoz alvaro dot munoz
at hpe dot com</p><p>Sam Ng samn at hpe dot com</p></td></tr><tr><th
colspan="1" rowspan="1" class="confluenceTh"><p>CVE Identifier</p></th><td
colspan="1" rowspan="1"
class="confluenceTd"><p>CVE-2016-4436</p></td></tr></tbody></table></div><h2
id="S2-035-Problem">Problem</h2><p>The method used to clean up action name can
produce vulnerable payload based on crafted input which can be used by attacker
to perform unspecified attack.</p><h2 id="S2-035-Solution">Solution</h2><p>You
should upgrade to latest Struts version or implement your own version
of <code>ActionMapper</code> based on source code of receomened Struts
versions.</p><h2
id="S2-035-Backwardcompatibility">Backward compatibility</h2><p>No issues
expected when upgrading Struts version.</p><h2
id="S2-035-Workaround">Workaround</h2><p>Implement your own version of clean up
method which will throw an exception.</p><p> </p></div>
</div>
Modified: websites/production/struts/content/docs/stream-result.html
==============================================================================
--- websites/production/struts/content/docs/stream-result.html (original)
+++ websites/production/struts/content/docs/stream-result.html Fri Jul 15
06:29:45 2016
@@ -138,27 +138,9 @@ under the License.
<div class="pagecontent">
<div class="wiki-content">
- <div id="ConfluenceContent"><p></p><p>
-A custom Result type for sending raw data (via an InputStream) directly to the
-HttpServletResponse. Very useful for allowing users to download content.
-</p><div class="confluence-information-macro
confluence-information-macro-note"><span class="aui-icon aui-icon-small
aui-iconfont-warning confluence-information-macro-icon"></span><div
class="confluence-information-macro-body"><p>If you are running your app server
under HTTPS and having issues with PDF's or other file streams you should take
a look at <a shape="rect" href="https-and-ie-issues.html">HTTPS and IE
Issues</a></p></div></div><h1 id="StreamResult-Parameters">Parameters</h1><p>
-</p><p></p><ul></ul><p></p><ul><li><b>contentType</b> - the stream mime-type
as sent to the web browser
-(default =
<code>text/plain</code>).</li></ul><p></p><ul><li><b>contentLength</b> - the
stream length in bytes (the browser displays a
-progress bar).</li></ul><p></p><ul><li><b>contentDisposition</b> - the content
disposition header value for
-specifing the file name (default = <code>inline</code>, values are typically
-<i>attachment;filename="document.pdf"</i>.</li></ul><p></p><ul><li><b>inputName</b>
- the name of the InputStream property from the chained
-action (default =
<code>inputStream</code>).</li></ul><p></p><ul><li><b>bufferSize</b> - the size
of the buffer to copy from input to output
-(default = <code>1024</code>).</li></ul><p></p><ul><li><b>allowCaching</b> if
set to 'false' it will set the headers 'Pragma' and 'Cache-Control'
-to 'no-cahce', and prevent client from caching the content. (default =
<code>true</code>)
-
-<p></p></li><li><b>contentCharSet</b> if set to a string, ';charset=value'
will be added to the
-content-type header, where value is the string set. If set to an expression,
the result
-of evaluating the expression will be used. If not set, then no charset will be
set on
-the header</li></ul>
-
-<p></p><p>These parameters can also be set by exposing a similarly named
getter method on your Action. For example, you can
-provide <code>getContentType()</code> to override that parameter for the
current action.</p>
-<h1 id="StreamResult-Examples">Examples</h1><h2
id="StreamResult-AnnotationbasedConfiguration">Annotation based
Configuration</h2><p>To configure Actions and Results with Annotations you need
to activate the Struts2 <a shape="rect"
href="convention-plugin.html">Convention Plugin</a> in your Struts2
application.</p><div class="code panel pdl" style="border-width: 1px;"><div
class="codeContent panelContent pdl">
+ <div id="ConfluenceContent"><p>A custom Result type for sending
raw data (via an InputStream) directly to the HttpServletResponse. Very
useful for allowing users to download content.</p><div
class="confluence-information-macro confluence-information-macro-note"><span
class="aui-icon aui-icon-small aui-iconfont-warning
confluence-information-macro-icon"></span><div
class="confluence-information-macro-body"><p>If you are running your app server
under HTTPS and having issues with PDF's or other file streams you should take
a look at <a shape="rect" href="https-and-ie-issues.html">HTTPS and IE
Issues</a></p></div></div><h1 id="StreamResult-Parameters">Parameters</h1><ul
style="list-style-type: square;"><li><span style="line-height:
1.42857;"><strong>contentType</strong> - the stream mime-type as sent to
the web browser </span>(default =
<code>text/plain</code>).</li><li><strong>contentLength</strong> - the stream
length in bytes (the browser displays a pr
ogress bar).</li><li><strong>contentDisposition</strong> - the content
disposition header value for specifying the file name (default =
<code>inline</code>, values are
typically <em>attachment;filename="document.pdf"</em>.</li><li><strong>inputName </strong>-
the name of the InputStream property from the chained action (default =
<strong>inputStream</strong>).</li><li><strong>bufferSize </strong>- the
size of the buffer to copy from input to output (default =
<code>1024</code>).</li><li><strong>allowCaching</strong> - if set to
'false' it will set the headers <code>Pragma</code> and
<code>Cache-Control</code> to <code>no-cahce</code>, and prevent client
from caching the content (default =
<code>true</code>).</li><li><strong>contentCharSet</strong> - if set to a
string, ';charset=value' will be added to the content-type header, where
value is the string set. If set to an expression, the result of evaluating
the expressi
on will be used. If not set, then no charset will be set on the
header</li></ul><p>These parameters can also be set by exposing a similarly
named getter method on your Action. For example, you can provide
<code>getContentType()</code> to override that parameter for the current
action. To do it you you must explicitly define this param as an expression
i.e.</p><div class="code panel pdl" style="border-width: 1px;"><div
class="codeHeader panelHeader pdl" style="border-bottom-width:
1px;"><b>parameter defined as an expression</b></div><div class="codeContent
panelContent pdl">
+<pre class="brush: xml; gutter: false; theme: Default"
style="font-size:12px;"><param
name="contentType">${contentType}</param></pre>
+</div></div><div class="confluence-information-macro
confluence-information-macro-note"><span class="aui-icon aui-icon-small
aui-iconfont-warning confluence-information-macro-icon"></span><div
class="confluence-information-macro-body"><p>Please be aware that this was
changed since Struts 2.5.2, previously each parameter was automagically
resolved by looking throughout the <code>ValueStack</code>, now you must
explicitly define wich parameter must be evaluated, even
<code>inputName</code>.</p></div></div><h1
id="StreamResult-Examples">Examples</h1><h2
id="StreamResult-AnnotationbasedConfiguration">Annotation based
Configuration</h2><p>To configure Actions and Results with Annotations you need
to activate the Struts2 <a shape="rect"
href="convention-plugin.html">Convention Plugin</a> in your Struts2
application.</p><div class="code panel pdl" style="border-width: 1px;"><div
class="codeContent panelContent pdl">
<pre class="brush: java; gutter: false; theme: Default"
style="font-size:12px;">package com.mycompany.webapp.actions;
import java.io.File;
@@ -175,7 +157,7 @@ import com.opensymphony.xwork2.ActionSup
type = "stream",
params = {
"contentType", "${type}",
- "inputName", "stream",
+ "inputName", "${stream}",
"bufferSize", "1024",
"contentDisposition", "attachment;filename=\"${filename}\""
}
@@ -207,17 +189,14 @@ public class FileDisplay extends ActionS
return this.stream;
}
}
-
</pre>
-</div></div><h2 id="StreamResult-XMLbasedConfiguration">XML based
Configuration</h2><p></p><div class="code panel pdl" style="border-width:
1px;"><div class="codeContent panelContent pdl">
-<script class="brush: xml; gutter: false; theme: Default"
type="syntaxhighlighter"><![CDATA[
-<result name="success" type="stream">
- <param name="contentType">image/jpeg</param>
- <param name="inputName">imageStream</param>
- <param
name="contentDisposition">attachment;filename="document.pdf"</param>
- <param name="bufferSize">1024</param>
-</result>
-]]></script>
+</div></div><h2 id="StreamResult-XMLbasedConfiguration">XML based
Configuration</h2><div class="code panel pdl" style="border-width: 1px;"><div
class="codeHeader panelHeader pdl" style="border-bottom-width: 1px;"><b>Example
configuration</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: java; gutter: false; theme: Default"
style="font-size:12px;"><result name="success" type="stream">
+ <param name="contentType">image/jpeg</param>
+ <param name="inputName">${imageStream}</param>
+ <param
name="contentDisposition">attachment;filename="document.pdf"</param>
+ <param name="bufferSize">1024</param>
+</result></pre>
</div></div></div>
</div>
Modified: websites/production/struts/content/docs/version-notes-2329.html
==============================================================================
--- websites/production/struts/content/docs/version-notes-2329.html (original)
+++ websites/production/struts/content/docs/version-notes-2329.html Fri Jul 15
06:29:45 2016
@@ -155,7 +155,7 @@ under the License.
<url>https://repository.apache.org/content/groups/staging/</url>
</repository>
</repositories></pre>
-</div></div><h2 id="VersionNotes2.3.29-InternalChanges">Internal
Changes</h2><ul><li><img class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Action name clean up is
error prone <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-035";>S2-035</a></li><li><a
shape="rect" href="https://cwiki.apache.org/confluence/display/WW/S2-036";><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"></a> Forced double OGNL
evaluation, when evaluated on raw user input in tag attributes, may lead to
remote code execution (similar to S2-029) <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-036";>S2-036</a></li><li><a
sha
pe="rect" href="https://cwiki.apache.org/confluence/display/WW/S2-037";><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> </a>Remote Code Execution
can be performed when using REST Plugin <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-037";>S2-037</a></li><li><a
shape="rect" href="https://cwiki.apache.org/confluence/display/WW/S2-038";><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> </a>It is possible to
bypass token validation and perform a CSRF attack <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-038";>S2-038</a></li><li><a
shape="rect" href="https://cwiki.apache.org/confluence/d
isplay/WW/S2-039"><img class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> </a>Getter as action method
leads to security bypass <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-039";>S2-039</a></li><li><a
shape="rect" href="https://cwiki.apache.org/confluence/display/WW/S2-040";><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> </a>Input validation bypass
using existing default action method <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-040";>S2-040</a></li><li><a
shape="rect" href="https://cwiki.apache.org/confluence/display/WW/S2-041";><img
class="emoticon emoticon-warning" src="https://cwi
ki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png"
data-emoticon-name="warning" alt="(warning)"></a> Possible DoS attack
when using URLValidator <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-041";>S2-041</a></li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4608";>WW-4608</a>] - Json result
type breaks</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4618";>WW-4618</a>] -
MessageStorePreResultListener doesn't store messages for 3rd-party
RedirectResult subclasses</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4622";>WW-4622</a>] -
[struts2-tiles-plugin] [2.3.28] [StrutsWildcardServletTilesApplicationContext]
getRealPath</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4623";>WW-4623</a>] - Multiple
tiles.xml
in web.xml</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4624";>WW-4624</a>] - New Tiles
version can not find tiles*.xml files in sub-directories</li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4626";>WW-4626</a>] -
EmailValidator flags .cat emails as invalid</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4627";>WW-4627</a>] - Struts2
JSON Plugin: messages in fieldsErrors are serialized twice since
jdk1.7_80</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4629";>WW-4629</a>] - Tile
definition Inheritance/overriding is broken in Struts2 tiles plugin
2.3.28+</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4630";>WW-4630</a>] -
<s:submit> generates a value attribute for type=image which violates
W3C</li><li>[<a shape="rect" class="external-link" href="htt
ps://issues.apache.org/jira/browse/WW-4633">WW-4633</a>] - ClassCastException
while generating report using Struts 2.3.28 and jasperreports
4.5.1</li></ul><p> </p><div class="confluence-information-macro
confluence-information-macro-note"><span class="aui-icon aui-icon-small
aui-iconfont-warning confluence-information-macro-icon"></span><div
class="confluence-information-macro-body"><p>This release contains fixe related
to <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-035";>S2-035</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-036";>S2-036</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-037";>S2-037</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-038";>S2-038</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-039";>S2-039</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-040";>S2-040</a> and <a
shape="rect" href="h
ttps://cwiki.apache.org/confluence/display/WW/S2-041">S2-041</a> security
bulletins, please read it carefully!</p></div></div><h3
id="VersionNotes2.3.29-IssueDetail">Issue Detail</h3><ul><li><a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12335463&projectId=12311041";>JIRA
Release Notes 2.3.29</a></li></ul><h3 id="VersionNotes2.3.29-IssueList">Issue
List</h3><ul><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12335472";>Struts 2.3.28
DONE</a></li><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12318399";>Struts 2.3.x
TODO</a></li></ul><h3 id="VersionNotes2.3.29-Otherresources">Other
resources</h3><ul><li><a shape="rect" class="external-link"
href="http://www.mail-archive.com/commits%40struts.apache.org/";
rel="nofollow">Commit Logs</a></li><li><a shape="rect" class="external-link"
href="https://git-wip-us.apache.org/repos/asf?p=struts
.git;a=tree;h=refs/heads/develop;hb=develop">Source Code
Repository</a></li></ul><div><span style="font-size: 24.0px;line-height:
30.0px;"><br clear="none"></span></div><div><span style="font-size:
24.0px;line-height: 30.0px;background-color: rgb(245,245,245);"><br
clear="none"></span></div></div>
+</div></div><h2 id="VersionNotes2.3.29-InternalChanges">Internal
Changes</h2><ul><li><img class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Action name clean up is
error prone <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-035";>S2-035</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Forced double OGNL
evaluation, when evaluated on raw user input in tag attributes, may lead to
remote code execution (similar to S2-029) <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-036";>S2-036</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB
/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png"
data-emoticon-name="warning" alt="(warning)"> Remote Code Execution can
be performed when using REST Plugin <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-037";>S2-037</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> It is possible to bypass
token validation and perform a CSRF attack <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-038";>S2-038</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Getter as action method
leads to security bypass <a shape="rect" href="h
ttps://cwiki.apache.org/confluence/display/WW/S2-039">S2-039</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Input validation bypass
using existing default action method <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-040";>S2-040</a></li><li><img
class="emoticon emoticon-warning"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png";
data-emoticon-name="warning" alt="(warning)"> Possible DoS attack when
using URLValidator <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-041";>S2-041</a></li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4608";>WW-4608</a>] - Json result
type breaks</li><li>[<a shape="rect" class="exte
rnal-link" href="https://issues.apache.org/jira/browse/WW-4618";>WW-4618</a>] -
MessageStorePreResultListener doesn't store messages for 3rd-party
RedirectResult subclasses</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4622";>WW-4622</a>] -
[struts2-tiles-plugin] [2.3.28] [StrutsWildcardServletTilesApplicationContext]
getRealPath</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4623";>WW-4623</a>] - Multiple
tiles.xml in web.xml</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4624";>WW-4624</a>] - New Tiles
version can not find tiles*.xml files in sub-directories</li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4626";>WW-4626</a>] -
EmailValidator flags .cat emails as invalid</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4627";>WW-4627</a>] - Struts2
JSON Plugi
n: messages in fieldsErrors are serialized twice since jdk1.7_80</li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4629";>WW-4629</a>] - Tile
definition Inheritance/overriding is broken in Struts2 tiles plugin
2.3.28+</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4630";>WW-4630</a>] -
<s:submit> generates a value attribute for type=image which violates
W3C</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4633";>WW-4633</a>] -
ClassCastException while generating report using Struts 2.3.28 and
jasperreports 4.5.1</li></ul><p> </p><div
class="confluence-information-macro confluence-information-macro-note"><span
class="aui-icon aui-icon-small aui-iconfont-warning
confluence-information-macro-icon"></span><div
class="confluence-information-macro-body"><p>This release contains fixe related
to <a shape="rect" href="https://cwiki.apache.org/conflue
nce/display/WW/S2-035">S2-035</a>, <a shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-036";>S2-036</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-037";>S2-037</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-038";>S2-038</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-039";>S2-039</a>, <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-040";>S2-040</a> and <a
shape="rect"
href="https://cwiki.apache.org/confluence/display/WW/S2-041";>S2-041</a>
security bulletins, please read it carefully!</p></div></div><h3
id="VersionNotes2.3.29-IssueDetail">Issue Detail</h3><ul><li><a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12335463&projectId=12311041";>JIRA
Release Notes 2.3.29</a></li></ul><h3 id="VersionNotes2.3.29-IssueList">Issue
List</h3><ul><li><a shape="rect" class="external-link" href="https://iss
ues.apache.org/jira/issues/?filter=12335472">Struts 2.3.28 DONE</a></li><li><a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12318399";>Struts 2.3.x
TODO</a></li></ul><h3 id="VersionNotes2.3.29-Otherresources">Other
resources</h3><ul><li><a shape="rect" class="external-link"
href="http://www.mail-archive.com/commits%40struts.apache.org/";
rel="nofollow">Commit Logs</a></li><li><a shape="rect" class="external-link"
href="https://git-wip-us.apache.org/repos/asf?p=struts.git;a=tree;h=refs/heads/develop;hb=develop";>Source
Code Repository</a></li></ul><div><span style="font-size: 24.0px;line-height:
30.0px;"><br clear="none"></span></div><div><span style="font-size:
24.0px;line-height: 30.0px;background-color: rgb(245,245,245);"><br
clear="none"></span></div></div>
</div>
Added: websites/production/struts/content/docs/version-notes-2330.html
==============================================================================
--- websites/production/struts/content/docs/version-notes-2330.html (added)
+++ websites/production/struts/content/docs/version-notes-2330.html Fri Jul 15
06:29:45 2016
@@ -0,0 +1,168 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd";>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<html>
+<head>
+ <link type="text/css" rel="stylesheet"
href="https://struts.apache.org/css/default.css";>
+ <style type="text/css">
+ .dp-highlighter {
+ width:95% !important;
+ }
+ </style>
+ <style type="text/css">
+ .footer {
+ background-image:
url('https://cwiki.apache.org/confluence/images/border/border_bottom.gif');
+ background-repeat: repeat-x;
+ background-position: left top;
+ padding-top: 4px;
+ color: #666;
+ }
+ </style>
+ <link href='https://struts.apache.org/highlighter/style/shCoreStruts.css'
rel='stylesheet' type='text/css' />
+ <link href='https://struts.apache.org/highlighter/style/shThemeStruts.css'
rel='stylesheet' type='text/css' />
+ <script src='https://struts.apache.org/highlighter/js/shCore.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushPlain.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushXml.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushJava.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushJScript.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushGroovy.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushBash.js'
type='text/javascript'></script>
+ <script type="text/javascript">
+ SyntaxHighlighter.defaults['toolbar'] = false;
+ SyntaxHighlighter.all();
+ </script>
+ <script type="text/javascript" language="javascript">
+ var hide = null;
+ var show = null;
+ var children = null;
+
+ function init() {
+ /* Search form initialization */
+ var form = document.forms['search'];
+ if (form != null) {
+ form.elements['domains'].value = location.hostname;
+ form.elements['sitesearch'].value = location.hostname;
+ }
+
+ /* Children initialization */
+ hide = document.getElementById('hide');
+ show = document.getElementById('show');
+ children = document.all != null ?
+ document.all['children'] :
+ document.getElementById('children');
+ if (children != null) {
+ children.style.display = 'none';
+ show.style.display = 'inline';
+ hide.style.display = 'none';
+ }
+ }
+
+ function showChildren() {
+ children.style.display = 'block';
+ show.style.display = 'none';
+ hide.style.display = 'inline';
+ }
+
+ function hideChildren() {
+ children.style.display = 'none';
+ show.style.display = 'inline';
+ hide.style.display = 'none';
+ }
+ </script>
+ <title>Version Notes 2.3.30</title>
+</head>
+<body onload="init()">
+<table border="0" cellpadding="2" cellspacing="0" width="100%">
+ <tr class="topBar">
+ <td align="left" valign="middle" class="topBarDiv" align="left" nowrap>
+ <a href="home.html">Home</a> > <a
href="guides.html">Guides</a> > <a
href="migration-guide.html">Migration Guide</a> > <a
href="version-notes-2330.html">Version Notes 2.3.30</a>
+ </td>
+ <td align="right" valign="middle" nowrap>
+ <form name="search" action="https://www.google.com/search";
method="get">
+ <input type="hidden" name="ie" value="UTF-8" />
+ <input type="hidden" name="oe" value="UTF-8" />
+ <input type="hidden" name="domains" value="" />
+ <input type="hidden" name="sitesearch" value="" />
+ <input type="text" name="q" maxlength="255" value="" />
+ <input type="submit" name="btnG" value="Google Search" />
+ </form>
+ </td>
+ </tr>
+</table>
+
+<div id="PageContent">
+ <div class="pageheader" style="padding: 6px 0px 0px 0px;">
+ <!-- We'll enable this once we figure out how to access (and save) the
logo resource -->
+ <!--img src="/wiki/images/confluence_logo.gif" style="float: left;
margin: 4px 4px 4px 10px;" border="0"-->
+ <div style="margin: 0px 10px 0px 10px" class="smalltext">Apache Struts
2 Documentation</div>
+ <div style="margin: 0px 10px 8px 10px" class="pagetitle">Version
Notes 2.3.30</div>
+
+ <div class="greynavbar" align="right" style="padding: 2px 10px;
margin: 0px;">
+ <a
href="https://cwiki.apache.org/confluence/pages/editpage.action?pageId=65145407";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/notep_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Edit Page"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/editpage.action?pageId=65145407";>Edit
Page</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/listpages.action?key=WW";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/browse_space.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Browse Space"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/listpages.action?key=WW";>Browse
Space</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/createpage.action?spaceKey=WW&fromPageId=65145407";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/add_page_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Add Page"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/createpage.action?spaceKey=WW&fromPageId=65145407";>Add
Page</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/createblogpost.action?spaceKey=WW&fromPageId=65145407";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/add_blogentry_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Add News"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/createblogpost.action?spaceKey=WW&fromPageId=65145407";>Add
News</a>
+ </div>
+ </div>
+
+ <div class="pagecontent">
+ <div class="wiki-content">
+ <div id="ConfluenceContent"><p><img class="emoticon emoticon-tick"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png";
data-emoticon-name="tick" alt="(tick)"> These are the notes for the Struts
2.3.30 distribution.</p><p><img class="emoticon emoticon-tick"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png";
data-emoticon-name="tick" alt="(tick)"> For prior notes in this release
series, see <a shape="rect" href="version-notes-2329.html">Version Notes
2.3.29</a></p><ul><li>If you are a Maven user, you might want to get started
using the <a shape="rect" href="struts-2-maven-archetypes.html">Maven
Archetype</a>.</li><li>Another quick-start entry point is the
<strong>blank</strong> application. Rename and deploy the WAR as a starting
point for your own development.</li><li>There is huge number of examples you
can als
o use as a starting point for you application <a shape="rect"
class="external-link" href="https://github.com/apache/struts-examples";
rel="nofollow">here</a></li></ul><div class="code panel pdl"
style="border-width: 1px;"><div class="codeHeader panelHeader pdl"
style="border-bottom-width: 1px;"><b>Maven Dependency</b></div><div
class="codeContent panelContent pdl">
+<pre class="brush: xml; gutter: false; theme: Default"
style="font-size:12px;"><dependency>
+ <groupId>org.apache.struts</groupId>
+ <artifactId>struts2-core</artifactId>
+ <version>2.3.30</version>
+</dependency>
+</pre>
+</div></div><p>You can also use Struts Archetype Catalog like below</p><div
class="code panel pdl" style="border-width: 1px;"><div class="codeHeader
panelHeader pdl" style="border-bottom-width: 1px;"><b>Struts Archetype
Catalog</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: text; gutter: false; theme: Default"
style="font-size:12px;">mvn archetype:generate
-DarchetypeCatalog=http://struts.apache.org/</pre>
+</div></div><div class="code panel pdl" style="border-width: 1px;"><div
class="codeHeader panelHeader pdl" style="border-bottom-width: 1px;"><b>Staging
Repository</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: xml; gutter: false; theme: Default"
style="font-size:12px;"><repositories>
+ <repository>
+ <id>apache.nexus</id>
+ <name>ASF Nexus Staging</name>
+
<url>https://repository.apache.org/content/groups/staging/</url>
+ </repository>
+</repositories></pre>
+</div></div><h2 id="VersionNotes2.3.30-InternalChanges">Internal
Changes</h2><h3 id="VersionNotes2.3.30-Issues">Issues</h3><h4
id="VersionNotes2.3.30-Bug">Bug</h4><ul><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4641";>WW-4641</a>]
- Pre-evaluation of "name" attribute stopped working</li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4642";>WW-4642</a>] - Unable to
retrieve s:hidden field values</li><li>[<a shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4645";>WW-4645</a>] -
SecurityMemberAccess exclude class design issue</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4651";>WW-4651</a>] - Negative
number is considered an arithmetic expression</li></ul><h4
id="VersionNotes2.3.30-Improvement">Improvement</h4><ul><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4648";>WW-4648</
a>] - Upgrade commons-fileupload to the latest version</li></ul><h3
id="VersionNotes2.3.30-IssueDetail">Issue Detail</h3><ul><li><a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12336340&projectId=12311041";>JIRA
Release Notes 2.3.30</a></li></ul><h3 id="VersionNotes2.3.30-IssueList">Issue
List</h3><ul><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12337894";>Struts 2.3.30
DONE</a></li><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12318399";>Struts 2.3.x
TODO</a></li></ul><h3 id="VersionNotes2.3.30-Otherresources">Other
resources</h3><ul><li><a shape="rect" class="external-link"
href="http://www.mail-archive.com/commits%40struts.apache.org/";
rel="nofollow">Commit Logs</a></li><li><a shape="rect" class="external-link"
href="https://git-wip-us.apache.org/repos/asf?p=struts.git;a=tree;h=refs/heads/develop;hb=develop";>Source
Code Repos
itory</a></li></ul><div><span style="font-size: 24.0px;line-height:
30.0px;"><br clear="none"></span></div><div><span style="font-size:
24.0px;line-height: 30.0px;background-color: rgb(245,245,245);"><br
clear="none"></span></div></div>
+ </div>
+
+
+ </div>
+</div>
+<div class="footer">
+ Generated by CXF SiteExporter
+</div>
+</body>
+</html>
Added: websites/production/struts/content/docs/version-notes-252.html
==============================================================================
--- websites/production/struts/content/docs/version-notes-252.html (added)
+++ websites/production/struts/content/docs/version-notes-252.html Fri Jul 15
06:29:45 2016
@@ -0,0 +1,168 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3.org/TR/html4/loose.dtd";>
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing,
+software distributed under the License is distributed on an
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+KIND, either express or implied. See the License for the
+specific language governing permissions and limitations
+under the License.
+-->
+<html>
+<head>
+ <link type="text/css" rel="stylesheet"
href="https://struts.apache.org/css/default.css";>
+ <style type="text/css">
+ .dp-highlighter {
+ width:95% !important;
+ }
+ </style>
+ <style type="text/css">
+ .footer {
+ background-image:
url('https://cwiki.apache.org/confluence/images/border/border_bottom.gif');
+ background-repeat: repeat-x;
+ background-position: left top;
+ padding-top: 4px;
+ color: #666;
+ }
+ </style>
+ <link href='https://struts.apache.org/highlighter/style/shCoreStruts.css'
rel='stylesheet' type='text/css' />
+ <link href='https://struts.apache.org/highlighter/style/shThemeStruts.css'
rel='stylesheet' type='text/css' />
+ <script src='https://struts.apache.org/highlighter/js/shCore.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushPlain.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushXml.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushJava.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushJScript.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushGroovy.js'
type='text/javascript'></script>
+ <script src='https://struts.apache.org/highlighter/js/shBrushBash.js'
type='text/javascript'></script>
+ <script type="text/javascript">
+ SyntaxHighlighter.defaults['toolbar'] = false;
+ SyntaxHighlighter.all();
+ </script>
+ <script type="text/javascript" language="javascript">
+ var hide = null;
+ var show = null;
+ var children = null;
+
+ function init() {
+ /* Search form initialization */
+ var form = document.forms['search'];
+ if (form != null) {
+ form.elements['domains'].value = location.hostname;
+ form.elements['sitesearch'].value = location.hostname;
+ }
+
+ /* Children initialization */
+ hide = document.getElementById('hide');
+ show = document.getElementById('show');
+ children = document.all != null ?
+ document.all['children'] :
+ document.getElementById('children');
+ if (children != null) {
+ children.style.display = 'none';
+ show.style.display = 'inline';
+ hide.style.display = 'none';
+ }
+ }
+
+ function showChildren() {
+ children.style.display = 'block';
+ show.style.display = 'none';
+ hide.style.display = 'inline';
+ }
+
+ function hideChildren() {
+ children.style.display = 'none';
+ show.style.display = 'inline';
+ hide.style.display = 'none';
+ }
+ </script>
+ <title>Version Notes 2.5.2</title>
+</head>
+<body onload="init()">
+<table border="0" cellpadding="2" cellspacing="0" width="100%">
+ <tr class="topBar">
+ <td align="left" valign="middle" class="topBarDiv" align="left" nowrap>
+ <a href="home.html">Home</a> > <a
href="guides.html">Guides</a> > <a
href="migration-guide.html">Migration Guide</a> > <a
href="version-notes-252.html">Version Notes 2.5.2</a>
+ </td>
+ <td align="right" valign="middle" nowrap>
+ <form name="search" action="https://www.google.com/search";
method="get">
+ <input type="hidden" name="ie" value="UTF-8" />
+ <input type="hidden" name="oe" value="UTF-8" />
+ <input type="hidden" name="domains" value="" />
+ <input type="hidden" name="sitesearch" value="" />
+ <input type="text" name="q" maxlength="255" value="" />
+ <input type="submit" name="btnG" value="Google Search" />
+ </form>
+ </td>
+ </tr>
+</table>
+
+<div id="PageContent">
+ <div class="pageheader" style="padding: 6px 0px 0px 0px;">
+ <!-- We'll enable this once we figure out how to access (and save) the
logo resource -->
+ <!--img src="/wiki/images/confluence_logo.gif" style="float: left;
margin: 4px 4px 4px 10px;" border="0"-->
+ <div style="margin: 0px 10px 0px 10px" class="smalltext">Apache Struts
2 Documentation</div>
+ <div style="margin: 0px 10px 8px 10px" class="pagetitle">Version
Notes 2.5.2</div>
+
+ <div class="greynavbar" align="right" style="padding: 2px 10px;
margin: 0px;">
+ <a
href="https://cwiki.apache.org/confluence/pages/editpage.action?pageId=65145429";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/notep_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Edit Page"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/editpage.action?pageId=65145429";>Edit
Page</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/listpages.action?key=WW";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/browse_space.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Browse Space"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/listpages.action?key=WW";>Browse
Space</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/createpage.action?spaceKey=WW&fromPageId=65145429";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/add_page_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Add Page"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/createpage.action?spaceKey=WW&fromPageId=65145429";>Add
Page</a>
+
+ <a
href="https://cwiki.apache.org/confluence/pages/createblogpost.action?spaceKey=WW&fromPageId=65145429";>
+ <img
src="https://cwiki.apache.org/confluence/images/icons/add_blogentry_16.gif";
+ height="16" width="16" border="0" align="absmiddle"
title="Add News"></a>
+ <a
href="https://cwiki.apache.org/confluence/pages/createblogpost.action?spaceKey=WW&fromPageId=65145429";>Add
News</a>
+ </div>
+ </div>
+
+ <div class="pagecontent">
+ <div class="wiki-content">
+ <div id="ConfluenceContent"><p><img class="emoticon emoticon-tick"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png";
data-emoticon-name="tick" alt="(tick)"> These are the notes for the Struts
2.5.2 distribution.</p><p><img class="emoticon emoticon-tick"
src="https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png";
data-emoticon-name="tick" alt="(tick)"> For prior notes in this release
series, see <a shape="rect" href="version-notes-251.html">Version Notes
2.5.1</a></p><ul><li>If you are a Maven user, you might want to get started
using the <a shape="rect" href="struts-2-maven-archetypes.html">Maven
Archetype</a>.</li></ul><div class="code panel pdl" style="border-width:
1px;"><div class="codeHeader panelHeader pdl" style="border-bottom-width:
1px;"><b>Maven Dependency</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: xml; gutter: false; theme: Default"
style="font-size:12px;"><dependency>
+ <groupId>org.apache.struts</groupId>
+ <artifactId>struts2-core</artifactId>
+ <version>2.5.2</version>
+</dependency>
+</pre>
+</div></div><p>You can also use Struts Archetype Catalog like below</p><div
class="code panel pdl" style="border-width: 1px;"><div class="codeHeader
panelHeader pdl" style="border-bottom-width: 1px;"><b>Struts Archetype
Catalog</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: text; gutter: false; theme: Default"
style="font-size:12px;">mvn archetype:generate
-DarchetypeCatalog=http://struts.apache.org/</pre>
+</div></div><div class="code panel pdl" style="border-width: 1px;"><div
class="codeHeader panelHeader pdl" style="border-bottom-width: 1px;"><b>Staging
Repository</b></div><div class="codeContent panelContent pdl">
+<pre class="brush: xml; gutter: false; theme: Default"
style="font-size:12px;"><repositories>
+ <repository>
+ <id>apache.nexus</id>
+ <name>ASF Nexus Staging</name>
+
<url>https://repository.apache.org/content/groups/staging/</url>
+ </repository>
+</repositories></pre>
+</div></div><h2 id="VersionNotes2.5.2-InternalChanges">Internal
Changes</h2><h3 id="VersionNotes2.5.2-Bug">Bug</h3><ul><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4645";>WW-4645</a>] -
SecurityMemberAccess exclude class design issue</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4650";>WW-4650</a>] - Json
deserialization does not work in 2.5.1</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4651";>WW-4651</a>] - Negative
number is considered an arithmetic expression</li><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4656";>WW-4656</a>] - Wildcard
redirect and path /static/</li></ul><h3
id="VersionNotes2.5.2-Improvement">Improvement</h3><ul><li>[<a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/browse/WW-4648";>WW-4648</a>] - Upgrade
commons-fileupload to the latest version</li><li>[<a
shape="rect" class="external-link"
href="https://issues.apache.org/jira/browse/WW-4655";>WW-4655</a>] - Cleans up
logic in StreamResult and update docs</li></ul><h2
id="VersionNotes2.5.2-IssueDetail">Issue Detail</h2><ul><li><a shape="rect"
class="external-link"
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12336341&projectId=12311041";>JIRA
Release Notes 2.5.2</a></li></ul><h2 id="VersionNotes2.5.2-IssueList">Issue
List</h2><ul><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12337895";>Struts 2.5.1
DONE</a></li><li><a shape="rect" class="external-link"
href="https://issues.apache.org/jira/issues/?filter=12335667";>Struts 2.5.x
TODO</a></li></ul><h2 id="VersionNotes2.5.2-Otherresources">Other
resources</h2><ul><li><a shape="rect" class="external-link"
href="http://www.mail-archive.com/commits%40struts.apache.org/";
rel="nofollow">Commit Logs</a></li><li><a shape="rect" class="external-link"
href="https://git-wip-us
.apache.org/repos/asf?p=struts.git;a=tree;h=refs/heads/develop;hb=develop">Source
Code Repository</a></li></ul><div><span style="font-size: 24.0px;line-height:
30.0px;"><br clear="none"></span></div><div><span style="font-size:
24.0px;line-height: 30.0px;background-color: rgb(245,245,245);"><br
clear="none"></span></div></div>
+ </div>
+
+
+ </div>
+</div>
+<div class="footer">
+ Generated by CXF SiteExporter
+</div>
+</body>
+</html>
![https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png"](https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/warning.png"){kind=link}
![https://cwiki.apache.org/confluence/images/icons/notep_16.gif"](https://cwiki.apache.org/confluence/images/icons/notep_16.gif"){kind=link}
![https://cwiki.apache.org/confluence/images/icons/browse_space.gif"](https://cwiki.apache.org/confluence/images/icons/browse_space.gif"){kind=link}
![https://cwiki.apache.org/confluence/images/icons/add_page_16.gif"](https://cwiki.apache.org/confluence/images/icons/add_page_16.gif"){kind=link}
![https://cwiki.apache.org/confluence/images/icons/add_blogentry_16.gif"](https://cwiki.apache.org/confluence/images/icons/add_blogentry_16.gif"){kind=link}
![https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png"](https://cwiki.apache.org/confluence/s/en_GB/5982/f2b47fb3d636c8bc9fd0b11c0ec6d0ae18646be7.1/_/images/icons/emoticons/check.png"){kind=link}