[struts-site] 01/01: Adds version notes for Struts 6.0.0
This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch release-600
in repository https://gitbox.apache.org/repos/asf/struts-site.git
commit 4a552b381ba7b16b8e096629c0aa07724e1f361c
Author: Lukasz Lenart
AuthorDate: Tue Jun 7 09:56:43 2022 +0200
Adds version notes for Struts 6.0.0
---
_config.yml | 8 +-
source/announce-2022.md | 297
2 files changed, 301 insertions(+), 4 deletions(-)
diff --git a/_config.yml b/_config.yml
index ad446c5c4..7dfc58f59 100644
--- a/_config.yml
+++ b/_config.yml
@@ -9,15 +9,15 @@ kramdown:
syntax_highlighter: rouge
# Simplifies introducing changes related to the latest release
-current_version: 2.5.30
-current_version_short: 2530
+current_version: 6.0.
+current_version_short: 600
prev_version: 2.3.37
prev_version_short: 2337
archetype_version: 2.5.22
current_beta_version: 2.5-BETA3
current_beta_version_short: 25B3
-release_date: 04 April 2022
-release_date_short: 20220404
+release_date: 06 June 2022
+release_date_short: 20220606
prev_release_date: 30 December 2018
prev_release_date_short: 20181230
beta_release_date_short: 20160126
diff --git a/source/announce-2022.md b/source/announce-2022.md
index c6d5084cc..728f9a8de 100644
--- a/source/announce-2022.md
+++ b/source/announce-2022.md
@@ -13,6 +13,303 @@ title: Announcements 2022
Skip to: Announcements - 2021
+ 06 June 2022 - Struts 2 ver. 6.0.0 General Availability {#a20220606}
+
+The Apache Struts group is pleased to announce that Apache Struts 2 ver. 6.0.0
is available as a "General Availability"
+release. The GA designation is our highest quality grade.
+
+**Version change**
+
+You can be surprised by the version change, previously we have been using
Struts 2.5.x versioning schema, but this was
+a bit misleading. Struts 2 is a different framework than Struts 1 and its
versioning is supposed to start with 1.0.0,
+yet that never happened. With each breaking changes release (like Struts 2.5),
we had been only upgrading the MINOR
+part of the versioning schema. To fix that problem as from Struts 2 ver. 6.0.0
(aka Struts 2.6) we adopt a proper SemVer
+to avoid such confusion.
+
+**Internal Changes**
+
+The framework requires Java 8 at runtime. Also Servlet API 3.1 capable
container is required.
+
+OGNL expressions are limited to 256 characters by default. See
[WW-5179](https://issues.apache.org/jira/browse/WW-5179)
+and
[docs](https://struts.apache.org/security/#apply-a-maximum-allowed-length-on-ognl-expressions)
for more details.
+
+Yasser's PR has been merged which contains a fix to double evaluation security
vulnerability - it should solve any future
+attack vectors, yet it can impact your application if you have been depending
on double evaluation.
+
+**How to test**
+
+- Run all your app tests, you shouldn't see any WARN log like below:
+ > Expression [so-and-so] isn't allowed by pattern [so-and-so]! See Accepted
/ Excluded patterns at https://struts.apache.org/security/
+- See if following components are still functioning correctly regarding
java-scripts:
+ - forms with client side validations
+ - doubleselect
+ - combobox
+- Check also `StreamResult`s, `AliasInterceptor` and `JasperReportResult`s if
they are still working as expected.
+
+Support to access static methods via OGNL expressions has been removed, use
action instance methods instead.
+
+**Bug**
+
+- WW-3534 - PrepareOperations.createActionContext does not detect existing
context correctly
+- WW-3730 - action tag accepts only String arrays as parameters
+- WW-4723 - s:url incompatible with JDK 1.5
+- WW-4742 - Problem with escape when the key from getText has no value
+- WW-4865 - Struts s:checkbox conversion fails to List
+- WW-4866 - ASM 5.2 and Java 9 leads to IllegalArgumentException
+- WW-4897 - KEYS, sigs and hashes should use https (SSL)
+- WW-4902 - Struts 2 fails to init Dispatcher - Tomcat Embedded
+- WW-4928 - Setting struts.devMode from system property not working as
described
+- WW-4930 - SMI cannot be diasabled for action-packages found via the
convention-plugin
+- WW-4941 - [jar_cache] Some jar_cache**.tmp files are generated into a
temporary directory(/tmp) during web service start
+- WW-4943 - opensymphony.xwork2.util.LocalizedTextUtil can't get i18n resources
+- WW-4944 - Struts 2 REST Tiles integration issue
+- WW-4945 - TagUtils#buildNamespace should throw an exception when invocation
is null
+- WW-4946 - Strtus 2 spring integrations is failing - fails to init Dispatcher
- Tomcat Embedded
+- WW-4948 - Struts 2.5.16 is creating jar_cache files in temp folder
+- WW-4951 - MD5 and SHA1 should no longer be provided on download pages
+- WW-4954 - xml-validation fails since struts 2.5.17
+- WW-4957 - Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil
class is removed and GlobalLocalizedTextProvider&StrutsLocalizedTextProvider
cannot be used instead.
+-
[struts-site] branch release-600 created (now 4a552b381)
This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a change to branch release-600 in repository https://gitbox.apache.org/repos/asf/struts-site.git at 4a552b381 Adds version notes for Struts 6.0.0 This branch includes the following new commits: new 4a552b381 Adds version notes for Struts 6.0.0 The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference.
[struts-site] branch asf-staging updated: Updates stage by Jenkins
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-staging in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-staging by this push: new bb7b29e97 Updates stage by Jenkins bb7b29e97 is described below commit bb7b29e97da80142f8387c42e977ffb784ed0cfa Author: jenkins AuthorDate: Tue Jun 7 08:00:22 2022 + Updates stage by Jenkins --- content/announce-2022.html | 318 content/core-developers/default-properties.html | 44 +++- content/core-developers/interceptors.html | 3 + content/core-developers/struts-default-xml.html | 3 + content/download.html | 44 ++-- content/index.html | 10 +- content/releases.html | 2 +- 7 files changed, 389 insertions(+), 35 deletions(-) diff --git a/content/announce-2022.html b/content/announce-2022.html index 6b0dd9ff9..e6501f87f 100644 --- a/content/announce-2022.html +++ b/content/announce-2022.html @@ -132,6 +132,7 @@ Announcements 2022 + 06 June 2022 - Struts 2 ver. 6.0.0 General Availability 04 April 2022 - Struts 2.5.30 General Availability 22 January 2022 - Struts 2.5.29 General Availability 02 January 2022 - Struts 2.5.28.3 General Availability @@ -141,6 +142,323 @@ Skip to: Announcements - 2021 +06 June 2022 - Struts 2 ver. 6.0.0 General Availability + +The Apache Struts group is pleased to announce that Apache Struts 2 ver. 6.0.0 is available as a “General Availability” +release. The GA designation is our highest quality grade. + +Version change + +You can be surprised by the version change, previously we have been using Struts 2.5.x versioning schema, but this was +a bit misleading. Struts 2 is a different framework than Struts 1 and its versioning is supposed to start with 1.0.0, +yet that never happened. With each breaking changes release (like Struts 2.5), we had been only upgrading the MINOR +part of the versioning schema. To fix that problem as from Struts 2 ver. 6.0.0 (aka Struts 2.6) we adopt a proper SemVer +to avoid such confusion. + +Internal Changes + +The framework requires Java 8 at runtime. Also Servlet API 3.1 capable container is required. + +OGNL expressions are limited to 256 characters by default. See https://issues.apache.org/jira/browse/WW-5179";>WW-5179 +and https://struts.apache.org/security/#apply-a-maximum-allowed-length-on-ognl-expressions";>docs for more details. + +Yasser’s PR has been merged which contains a fix to double evaluation security vulnerability - it should solve any future +attack vectors, yet it can impact your application if you have been depending on double evaluation. + +How to test + + + Run all your app tests, you shouldn’t see any WARN log like below: + + Expression [so-and-so] isn’t allowed by pattern [so-and-so]! See Accepted / Excluded patterns at https://struts.apache.org/security/ + + + See if following components are still functioning correctly regarding java-scripts: + + forms with client side validations + doubleselect + combobox + + + Check also StreamResults, AliasInterceptor and JasperReportResults if they are still working as expected. + + +Support to access static methods via OGNL expressions has been removed, use action instance methods instead. + +Bug + + + WW-3534 - PrepareOperations.createActionContext does not detect existing context correctly + WW-3730 - action tag accepts only String arrays as parameters + WW-4723 - s:url incompatible with JDK 1.5 + WW-4742 - Problem with escape when the key from getText has no value + WW-4865 - Struts s:checkbox conversion fails to List + WW-4866 - ASM 5.2 and Java 9 leads to IllegalArgumentException + WW-4897 - KEYS, sigs and hashes should use https (SSL) + WW-4902 - Struts 2 fails to init Dispatcher - Tomcat Embedded + WW-4928 - Setting struts.devMode from system property not working as described + WW-4930 - SMI cannot be diasabled for action-packages found via the convention-plugin + WW-4941 - [jar_cache] Some jar_cache**.tmp files are generated into a temporary directory(/tmp) during web service start + WW-4943 - opensymphony.xwork2.util.LocalizedTextUtil can’t get i18n resources + WW-4944 - Struts 2 REST Tiles integration issue + WW-4945 - TagUtils#buildNamespace should throw an exception when invocation is null + WW-4946 - Strtus 2 spring integrations is failing - fails to init Dispatcher - Tomcat Embedded + WW-4948 - Struts 2.5.16 is creating jar_cache files in temp folder + WW-4951 - MD5 and SHA1 should no longer be provided on download pages + WW-4954 - xml-validation fails since struts 2.5.17 + WW-4957 - Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider&StrutsLocalizedTextProvider cannot be u
[struts-site] 01/01: Adds version notes for Struts 6.0.0
This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch release-600
in repository https://gitbox.apache.org/repos/asf/struts-site.git
commit c9edddb4f9e7cc0fb6f5f39617c163917c5e6fbf
Author: Lukasz Lenart
AuthorDate: Tue Jun 7 09:56:43 2022 +0200
Adds version notes for Struts 6.0.0
---
_config.yml | 8 +-
source/announce-2022.md | 297
2 files changed, 301 insertions(+), 4 deletions(-)
diff --git a/_config.yml b/_config.yml
index ad446c5c4..b581198e2 100644
--- a/_config.yml
+++ b/_config.yml
@@ -9,15 +9,15 @@ kramdown:
syntax_highlighter: rouge
# Simplifies introducing changes related to the latest release
-current_version: 2.5.30
-current_version_short: 2530
+current_version: 6.0.0
+current_version_short: 600
prev_version: 2.3.37
prev_version_short: 2337
archetype_version: 2.5.22
current_beta_version: 2.5-BETA3
current_beta_version_short: 25B3
-release_date: 04 April 2022
-release_date_short: 20220404
+release_date: 06 June 2022
+release_date_short: 20220606
prev_release_date: 30 December 2018
prev_release_date_short: 20181230
beta_release_date_short: 20160126
diff --git a/source/announce-2022.md b/source/announce-2022.md
index c6d5084cc..5ef6fe973 100644
--- a/source/announce-2022.md
+++ b/source/announce-2022.md
@@ -13,6 +13,303 @@ title: Announcements 2022
Skip to: Announcements - 2021
+ 06 June 2022 - Struts 2 ver. 6.0.0 General Availability {#a20220606}
+
+The Apache Struts group is pleased to announce that Apache Struts 2 ver. 6.0.0
is available as a "General Availability"
+release. The GA designation is our highest quality grade.
+
+**Version change**
+
+You can be surprised by the version change, previously we have been using
Struts 2.5.x versioning schema, but this was
+a bit misleading. Struts 2 is a different framework than Struts 1 and its
versioning is supposed to start with 1.0.0,
+yet that never happened. With each breaking changes release (like Struts 2.5),
we had been only upgrading the MINOR
+part of the versioning schema. To fix that problem as from Struts 2 ver. 6.0.0
(aka Struts 2.6) we adopt a proper SemVer
+to avoid such confusion.
+
+**Internal Changes**
+
+The framework requires Java 8 at runtime. Also Servlet API 3.1 capable
container is required.
+
+OGNL expressions are limited to 256 characters by default. See
[WW-5179](https://issues.apache.org/jira/browse/WW-5179)
+and
[docs](https://struts.apache.org/security/#apply-a-maximum-allowed-length-on-ognl-expressions)
for more details.
+
+Yasser's PR has been merged which contains a fix to double evaluation security
vulnerability - it should solve any future
+attack vectors, yet it can impact your application if you have been depending
on double evaluation.
+
+_How to test_
+
+- Run all your app tests, you shouldn't see any WARN log like below:
+ > Expression [so-and-so] isn't allowed by pattern [so-and-so]! See Accepted
/ Excluded patterns at https://struts.apache.org/security/
+- See if following components are still functioning correctly regarding
java-scripts:
+ - forms with client side validations
+ - doubleselect
+ - combobox
+- Check also `StreamResult`s, `AliasInterceptor` and `JasperReportResult`s if
they are still working as expected.
+
+Support to access static methods via OGNL expressions has been removed, use
action instance methods instead.
+
+**Bug**
+
+- WW-3534 - PrepareOperations.createActionContext does not detect existing
context correctly
+- WW-3730 - action tag accepts only String arrays as parameters
+- WW-4723 - s:url incompatible with JDK 1.5
+- WW-4742 - Problem with escape when the key from getText has no value
+- WW-4865 - Struts s:checkbox conversion fails to List
+- WW-4866 - ASM 5.2 and Java 9 leads to IllegalArgumentException
+- WW-4897 - KEYS, sigs and hashes should use https (SSL)
+- WW-4902 - Struts 2 fails to init Dispatcher - Tomcat Embedded
+- WW-4928 - Setting struts.devMode from system property not working as
described
+- WW-4930 - SMI cannot be diasabled for action-packages found via the
convention-plugin
+- WW-4941 - [jar_cache] Some jar_cache**.tmp files are generated into a
temporary directory(/tmp) during web service start
+- WW-4943 - opensymphony.xwork2.util.LocalizedTextUtil can't get i18n resources
+- WW-4944 - Struts 2 REST Tiles integration issue
+- WW-4945 - TagUtils#buildNamespace should throw an exception when invocation
is null
+- WW-4946 - Strtus 2 spring integrations is failing - fails to init Dispatcher
- Tomcat Embedded
+- WW-4948 - Struts 2.5.16 is creating jar_cache files in temp folder
+- WW-4951 - MD5 and SHA1 should no longer be provided on download pages
+- WW-4954 - xml-validation fails since struts 2.5.17
+- WW-4957 - Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil
class is removed and GlobalLocalizedTextProvider&StrutsLocalizedTextProvider
cannot be used instead.
+- W
[struts-site] branch release-600 updated (4a552b381 -> c9edddb4f)
This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a change to branch release-600 in repository https://gitbox.apache.org/repos/asf/struts-site.git discard 4a552b381 Adds version notes for Struts 6.0.0 new c9edddb4f Adds version notes for Struts 6.0.0 This update added new revisions after undoing existing revisions. That is to say, some revisions that were in the old version of the branch are not in the new version. This situation occurs when a user --force pushes a change and generates a repository containing something like this: * -- * -- B -- O -- O -- O (4a552b381) \ N -- N -- N refs/heads/release-600 (c9edddb4f) You should already have received notification emails for all of the O revisions, and so the following emails describe only the N revisions from the common base, B. Any revisions marked "omit" are not gone; other references still refer to them. Any revisions marked "discard" are gone forever. The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: _config.yml | 2 +- source/announce-2022.md | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-)
[struts-site] branch asf-staging updated: Updates stage by Jenkins
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-staging in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-staging by this push: new d2f1efcc7 Updates stage by Jenkins d2f1efcc7 is described below commit d2f1efcc78768763d13ce819f663546c51e72627 Author: jenkins AuthorDate: Tue Jun 7 08:05:44 2022 + Updates stage by Jenkins --- content/announce-2022.html | 4 ++-- content/download.html | 44 ++-- content/index.html | 6 +++--- content/releases.html | 2 +- 4 files changed, 28 insertions(+), 28 deletions(-) diff --git a/content/announce-2022.html b/content/announce-2022.html index e6501f87f..60536c49d 100644 --- a/content/announce-2022.html +++ b/content/announce-2022.html @@ -165,7 +165,7 @@ and https://struts.apache.org/security/#apply-a-maximum-allowed-length- Yasser’s PR has been merged which contains a fix to double evaluation security vulnerability - it should solve any future attack vectors, yet it can impact your application if you have been depending on double evaluation. -How to test +How to test Run all your app tests, you shouldn’t see any WARN log like below: @@ -442,7 +442,7 @@ attack vectors, yet it can impact your application if you have been depending on Please read the https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.0";>Version Notes to find more details about performed -bug fixes and improvements. +bug fixes and improvements. Also, a dedicated https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration";>migration guide has been prepared. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. diff --git a/content/download.html b/content/download.html index 749089284..4b09e483e 100644 --- a/content/download.html +++ b/content/download.html @@ -191,26 +191,26 @@ Full Releases -Struts 6.0. +Struts 6.0.0 - https://struts.apache.org/";>Apache Struts 6.0. is an elegant, extensible + https://struts.apache.org/";>Apache Struts 6.0.0 is an elegant, extensible framework for creating enterprise-ready Java web applications. It is available in a full distribution, or as separate library, source, example and documentation distributions. - Struts 6.0. is the "best available" version of Struts in the 2.5 series. + Struts 6.0.0 is the "best available" version of Struts in the 2.5 series. -https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.";>Version Notes +https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.0.0";>Version Notes Full Distribution: -struts-6.0.-all.zip (65MB) -[https://downloads.apache.org/struts/6.0./struts-6.0.-all.zip.asc";>PGP] -[https://downloads.apache.org/struts/6.0./struts-6.0.-all.zip.sha256";>SHA256] +struts-6.0.0-all.zip (65MB) +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-all.zip.asc";>PGP] +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-all.zip.sha256";>SHA256] @@ -218,9 +218,9 @@ Example Applications: -struts-6.0.-apps.zip (35MB) -[https://downloads.apache.org/struts/6.0./struts-6.0.-apps.zip.asc";>PGP] -[https://downloads.apache.org/struts/6.0./struts-6.0.-apps.zip.sha256";>SHA256] +struts-6.0.0-apps.zip (35MB) +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-apps.zip.asc";>PGP] +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-apps.zip.sha256";>SHA256] @@ -228,9 +228,9 @@ Essential Dependencies Only: -struts-6.0.-min-lib.zip (4MB) -[https://downloads.apache.org/struts/6.0./struts-6.0.-min-lib.zip.asc";>PGP] -[https://downloads.apache.org/struts/6.0./struts-6.0.-min-lib.zip.sha256";>SHA256] +struts-6.0.0-min-lib.zip (4MB) +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-min-lib.zip.asc";>PGP] +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-min-lib.zip.sha256";>SHA256] @@ -238,9 +238,9 @@ All Dependencies: -struts-6.0.-lib.zip (19MB) -[https://downloads.apache.org/struts/6.0./struts-6.0.-lib.zip.asc";>PGP] -[https://downloads.apache.org/struts/6.0./struts-6.0.-lib.zip.sha256";>SHA256] +struts-6.0.0-lib.zip (19MB) +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-lib.zip.asc";>PGP] +[https://downloads.apache.org/struts/6.0.0/struts-6.0.0-lib.zip.sha256";>SHA256] @@ -248,9 +248,9 @@ Documentation: -struts-6.0.-docs.zip (13MB) -[https://downloads.apache.org/struts/6.0./struts-6.0.-docs.zip.asc";>PGP] -[https://downloads.apache.org/struts/6.0./struts-6.0.-docs
[struts-site] 01/01: Merge pull request #165 from apache/release-600
This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/struts-site.git commit 53aca19c2d7ea0a4c1fd2ddb282f2e8166aa125b Merge: eefe8d0ea c9edddb4f Author: Lukasz Lenart AuthorDate: Tue Jun 7 10:07:33 2022 +0200 Merge pull request #165 from apache/release-600 Adds version notes for Struts 6.0.0 _config.yml | 8 +- source/announce-2022.md | 297 2 files changed, 301 insertions(+), 4 deletions(-)
[struts-site] branch master updated (eefe8d0ea -> 53aca19c2)
This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a change to branch master in repository https://gitbox.apache.org/repos/asf/struts-site.git from eefe8d0ea Merge pull request #164 from apache/privacy-policy add c9edddb4f Adds version notes for Struts 6.0.0 new 53aca19c2 Merge pull request #165 from apache/release-600 The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "add" were already present in the repository and have only been added to this reference. Summary of changes: _config.yml | 8 +- source/announce-2022.md | 297 2 files changed, 301 insertions(+), 4 deletions(-)
[struts-site] branch asf-site updated: Automatic Site Publish by Buildbot
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-site in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-site by this push: new 312e6b3c6 Automatic Site Publish by Buildbot 312e6b3c6 is described below commit 312e6b3c6bf2c6e6e3f2557490c538b99d11b9fc Author: buildbot AuthorDate: Tue Jun 7 08:08:09 2022 + Automatic Site Publish by Buildbot --- output/announce-2022.html | 318 + output/core-developers/default-properties.html | 44 +++- output/core-developers/interceptors.html | 3 + output/core-developers/struts-default-xml.html | 3 + output/download.html | 44 ++-- output/index.html | 10 +- output/releases.html | 2 +- 7 files changed, 389 insertions(+), 35 deletions(-) diff --git a/output/announce-2022.html b/output/announce-2022.html index 6b0dd9ff9..60536c49d 100644 --- a/output/announce-2022.html +++ b/output/announce-2022.html @@ -132,6 +132,7 @@ Announcements 2022 + 06 June 2022 - Struts 2 ver. 6.0.0 General Availability 04 April 2022 - Struts 2.5.30 General Availability 22 January 2022 - Struts 2.5.29 General Availability 02 January 2022 - Struts 2.5.28.3 General Availability @@ -141,6 +142,323 @@ Skip to: Announcements - 2021 +06 June 2022 - Struts 2 ver. 6.0.0 General Availability + +The Apache Struts group is pleased to announce that Apache Struts 2 ver. 6.0.0 is available as a “General Availability” +release. The GA designation is our highest quality grade. + +Version change + +You can be surprised by the version change, previously we have been using Struts 2.5.x versioning schema, but this was +a bit misleading. Struts 2 is a different framework than Struts 1 and its versioning is supposed to start with 1.0.0, +yet that never happened. With each breaking changes release (like Struts 2.5), we had been only upgrading the MINOR +part of the versioning schema. To fix that problem as from Struts 2 ver. 6.0.0 (aka Struts 2.6) we adopt a proper SemVer +to avoid such confusion. + +Internal Changes + +The framework requires Java 8 at runtime. Also Servlet API 3.1 capable container is required. + +OGNL expressions are limited to 256 characters by default. See https://issues.apache.org/jira/browse/WW-5179";>WW-5179 +and https://struts.apache.org/security/#apply-a-maximum-allowed-length-on-ognl-expressions";>docs for more details. + +Yasser’s PR has been merged which contains a fix to double evaluation security vulnerability - it should solve any future +attack vectors, yet it can impact your application if you have been depending on double evaluation. + +How to test + + + Run all your app tests, you shouldn’t see any WARN log like below: + + Expression [so-and-so] isn’t allowed by pattern [so-and-so]! See Accepted / Excluded patterns at https://struts.apache.org/security/ + + + See if following components are still functioning correctly regarding java-scripts: + + forms with client side validations + doubleselect + combobox + + + Check also StreamResults, AliasInterceptor and JasperReportResults if they are still working as expected. + + +Support to access static methods via OGNL expressions has been removed, use action instance methods instead. + +Bug + + + WW-3534 - PrepareOperations.createActionContext does not detect existing context correctly + WW-3730 - action tag accepts only String arrays as parameters + WW-4723 - s:url incompatible with JDK 1.5 + WW-4742 - Problem with escape when the key from getText has no value + WW-4865 - Struts s:checkbox conversion fails to List + WW-4866 - ASM 5.2 and Java 9 leads to IllegalArgumentException + WW-4897 - KEYS, sigs and hashes should use https (SSL) + WW-4902 - Struts 2 fails to init Dispatcher - Tomcat Embedded + WW-4928 - Setting struts.devMode from system property not working as described + WW-4930 - SMI cannot be diasabled for action-packages found via the convention-plugin + WW-4941 - [jar_cache] Some jar_cache**.tmp files are generated into a temporary directory(/tmp) during web service start + WW-4943 - opensymphony.xwork2.util.LocalizedTextUtil can’t get i18n resources + WW-4944 - Struts 2 REST Tiles integration issue + WW-4945 - TagUtils#buildNamespace should throw an exception when invocation is null + WW-4946 - Strtus 2 spring integrations is failing - fails to init Dispatcher - Tomcat Embedded + WW-4948 - Struts 2.5.16 is creating jar_cache files in temp folder + WW-4951 - MD5 and SHA1 should no longer be provided on download pages + WW-4954 - xml-validation fails since struts 2.5.17 + WW-4957 - Update struts version from 2.5.10 to 2.5.17. LocalizedTextUtil class is removed and GlobalLocalizedTextProvider&StrutsLocalizedTextProvider cannot
[struts-site] branch asf-staging updated: Updates stage by Jenkins
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-staging in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-staging by this push: new f77a0e744 Updates stage by Jenkins f77a0e744 is described below commit f77a0e7445cc41fd3cff194542e89ed7057d8c46 Author: jenkins AuthorDate: Tue Jun 7 08:09:42 2022 + Updates stage by Jenkins
[struts-site] branch master updated: Uses shortcut instead of full url
This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/struts-site.git
The following commit(s) were added to refs/heads/master by this push:
new d37d2bc8e Uses shortcut instead of full url
d37d2bc8e is described below
commit d37d2bc8eb34e3eb84ee0ed74eb12c8ce796d20c
Author: Lukasz Lenart
AuthorDate: Tue Jun 7 10:12:11 2022 +0200
Uses shortcut instead of full url
---
source/announce-2022.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/source/announce-2022.md b/source/announce-2022.md
index 5ef6fe973..aa3b75276 100644
--- a/source/announce-2022.md
+++ b/source/announce-2022.md
@@ -294,7 +294,7 @@ Support to access static methods via OGNL expressions has
been removed, use acti
- WW-5174 - Upgrade Jackson-Core to version 2.13.2 and Jackson-Databind to
2.13.2.1
> Please read the [Version Notes]({{ site.wiki_url }}/Version+Notes+6.0.0) to
> find more details about performed
-> bug fixes and improvements. Also, a dedicated [migration
guide](https://cwiki.apache.org/confluence/display/WW/Struts+2.5+to+6.0.0+migration)
has been prepared.
+> bug fixes and improvements. Also, a dedicated [migration guide]({{
site.wiki_url }}/Struts+2.5+to+6.0.0+migration) has been prepared.
Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications.
The framework has been designed to streamline the full development cycle, from
building, to deploying,
[struts-site] branch asf-staging updated: Updates stage by Jenkins
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-staging in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-staging by this push: new 310579fbf Updates stage by Jenkins 310579fbf is described below commit 310579fbfdc66f634c3c45f12f883b2b9b11341d Author: jenkins AuthorDate: Tue Jun 7 08:14:53 2022 + Updates stage by Jenkins
[struts-site] branch master updated: Fixes bad link to Tiles config reference
This is an automated email from the ASF dual-hosted git repository. lukaszlenart pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/master by this push: new 4d6dc5c15 Fixes bad link to Tiles config reference 4d6dc5c15 is described below commit 4d6dc5c15a682f8aa67b65004b43324a97d5210f Author: Lukasz Lenart AuthorDate: Wed Jun 8 07:13:29 2022 +0200 Fixes bad link to Tiles config reference --- source/plugins/tiles/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/plugins/tiles/index.md b/source/plugins/tiles/index.md index 7e10f0bdb..061ba274d 100644 --- a/source/plugins/tiles/index.md +++ b/source/plugins/tiles/index.md @@ -165,7 +165,7 @@ Please check [tiles](https://github.com/apache/struts-examples/tree/master/tile ## Settings -This plugin does inherits settings from [Tiles configuration](http://tiles.apache.org/config-reference). +This plugin does inherits settings from [Tiles configuration](https://tiles.apache.org/framework/config-reference.html). ## Installation
[struts-site] branch asf-staging updated: Updates stage by Jenkins
This is an automated email from the ASF dual-hosted git repository. git-site-role pushed a commit to branch asf-staging in repository https://gitbox.apache.org/repos/asf/struts-site.git The following commit(s) were added to refs/heads/asf-staging by this push: new a0d70fa13 Updates stage by Jenkins a0d70fa13 is described below commit a0d70fa138a34f6cd6db115a56d962e60699d035 Author: jenkins AuthorDate: Wed Jun 8 05:15:44 2022 + Updates stage by Jenkins --- content/plugins/tiles/index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/plugins/tiles/index.html b/content/plugins/tiles/index.html index 6912fe98b..a261d3864 100644 --- a/content/plugins/tiles/index.html +++ b/content/plugins/tiles/index.html @@ -301,7 +301,7 @@ prefix to evaluate provided expression as a key in Struts resource bundles. Settings -This plugin does inherits settings from http://tiles.apache.org/config-reference";>Tiles configuration. +This plugin does inherits settings from https://tiles.apache.org/framework/config-reference.html";>Tiles configuration. Installation
