These are the notes for the Struts 2.3.20 distribution.
For prior notes in this release series, see Version Notes 2.3.16.3
- If you are a Maven user, you might want to get started using the Maven Archetype.
- Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.
Maven Dependency
You can also use Struts Archetype Catalog like below
Struts Archetype Catalog
Staging Repository
Internal Changes
Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3- Extended existing security mechanism to block access to given Java packages and Classes, see #11 or read Internal security mechanism
- Collection Parameters for RedirectResults, WW-4224
- Make ParametersInterceptor supports chinese in hash key by default, WW-4250
- themes.properties can be loaded using ServletContext allows to put
templatefolder under WEB-INF or on classpath, WW-4260 - New tag datetextfield, WW-3493
- Only valid Ognl expressions are cached, WW-4146
- CustomTextProvider can be used for validation errors of model driven actions, WW-4202
- datetimepicker's label fixed, WW-4254
- PropertiesJudge removed and properties are checked in
SecurityMemberAccess, WW-4257 - resource reloading works in IBM JVM, WW-4266
- default reloading settings were removed from
default.properties, WW-4267 - commons-fileupload library upgraded to version 1.3.1 to fix potential security vulnerability, WW-4286
- The
schemeattribute accepts expressions ins:urltag, WW-4024 - Solves problem with infinite loop in
FastByteArrayOutputStream, WW-4383 LocalizedTextUtilsupports manyClassLoaders, WW-4379- Bill of Materials pom was introduced, WW-4326
debug=browser|consolewas migrated to jQuery, WW-4322struts_dojo.jswas fixed, WW-4349- interface
org/apache/struts2/views/TagLibrarywas restored and marked as@Depreacted, WW-4255 <s:hidden/>tag is wrapped with<tr/>and<td/>tags to match layout of other tags inxhtmltheme, WW-4297- and many other small improvements, please see the release notes