Author: lukaszlenart
Date: Sun Dec 7 15:16:53 2014
New Revision: 1643681
URL: http://svn.apache.org/r1643681
Log:
Updates site with notes about 2.3.20 version
Modified:
struts/site/trunk/_config.yml
struts/site/trunk/source/announce.md
struts/site/trunk/source/download.html
struts/site/trunk/source/downloads.html
struts/site/trunk/source/index.html
Modified: struts/site/trunk/_config.yml
URL:
http://svn.apache.org/viewvc/struts/site/trunk/_config.yml?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/_config.yml (original)
+++ struts/site/trunk/_config.yml Sun Dec 7 15:16:53 2014
@@ -12,7 +12,7 @@ encoding: UTF-8
root:
# Simplifies introducing changes related to the latest release
-current_version: 2.3.16.3
-current_version_short: 23163
-release_date: 3 may 2014
-release_date_short: 20140503
+current_version: 2.3.20
+current_version_short: 2320
+release_date: 7 december 2014
+release_date_short: 20141207
Modified: struts/site/trunk/source/announce.md
URL:
http://svn.apache.org/viewvc/struts/site/trunk/source/announce.md?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/source/announce.md (original)
+++ struts/site/trunk/source/announce.md Sun Dec 7 15:16:53 2014
@@ -8,6 +8,53 @@ title: Announcements
Skip to: <a href="announce-2013.html">Announcements - 2013</a>
</p>
+#### <span id="a20141207"> 12 December 2014 - Struts 2.3.20 General
Availability with Security Fix Release
+
+The Apache Struts group is pleased to announce that Struts 2.3.20 is available
as a "General Availability"
+release. The GA designation is our highest quality grade.
+
+Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications.
+The framework is designed to streamline the full development cycle, from
building, to deploying,
+to maintaining applications over time.
+
+One medium security issue was solved with this release:
+
+ - [S2-023](http://struts.apache.org/docs/s2-023.html)
+ Generated value of token can be predictable
+
+Besides that, this release contains several fixes and improvements just to
mention few of them:
+
+ - merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
+ - extended existing security mechanism to block access to given Java
packages and Classes
+ - collection Parameters for `RedirectResult`
+ - make `ParametersInterceptor` supports chinese in hash key by default
+ - `themes.properties` can be loaded using `ServletContext` allows to put
template folder under WEB-INF or on classpath
+ - new tag `datetextfield`
+ - only valid Ognl expressions are cached
+ - custom `TextProvider` can be used for validation errors of model driven
actions
+ - `datetimepicker`'s label fixed
+ - `PropertiesJudge` removed and properties are checked in
`SecurityMemberAccess`
+ - resource reloading works in IBM JVM
+ - default reloading settings were removed from default.properties
+ - `commons-fileupload` library upgraded to version 1.3.1 to fix potential
security vulnerability
+ - the scheme attribute accepts expressions in `s:url` tag
+ - solves problem with infinite loop in `FastByteArrayOutputStream`
+ - `LocalizedTextUtil` supports many ClassLoaders
+ - Bill of Materials pom was introduced
+ - `debug=browser|console` was migrated to jQuery
+ - `struts_dojo.js` was fixed
+ - interface `org/apache/struts2/views/TagLibrary` was restored and marked as
`@Depreacted`
+
+and many other small improvements, please careful read the [version
notes](http://struts.apache.org/docs/version-notes-2320.html).
+
+**All developers are strongly advised to perform this action.**
+
+The 2.3.x series of the Apache Struts framework has a minimum requirement of
the following specification versions:
+Servlet API 2.4, JSP API 2.0, and Java 5.
+
+Should any issues arise with your use of any version of the Struts framework,
+please post your comments to the user list, and, if appropriate, file a
tracking ticket.
+
#### <span id="a20140503"> 3 May 2014 - Struts 2.3.16.3 General Availability
Release - Security Fix Release
The Apache Struts group is pleased to announce that Struts 2.3.16.3 is
available as a "General Availability"
@@ -19,7 +66,7 @@ to maintaining applications over time.
One medium security issue was solved with this release:
- - [S2-022](http://struts.apache.org/release/2.3.x/docs/s2-022.html)
+ - [S2-022](http://struts.apache.org/docs/s2-022.html)
Extends excluded params in CookieInterceptor to avoid manipulation of
Struts' internals
All developers are strongly advised to perform this action.
@@ -35,9 +82,9 @@ to maintaining applications over time.
Two security issues were solved with this release:
- - [S2-021](http://struts.apache.org/release/2.3.x/docs/s2-021.html)
+ - [S2-021](http://struts.apache.org/docs/s2-021.html)
Improves excluded params to avoid ClassLoader manipulation via
ParametersInterceptor
- - [S2-021](http://struts.apache.org/release/2.3.x/docs/s2-021.html)
+ - [S2-021](http://struts.apache.org/docs/s2-021.html)
Adds excluded params to CookieInterceptor to avoid ClassLoader
manipulation when the interceptors is configured
to accept all cookie names (wildcard matching via "*")
@@ -99,9 +146,9 @@ to maintaining applications over time.
Two security issues were solved with this release:
- - [S2-020](http://struts.apache.org/release/2.3.x/docs/s2-020.html)
ClassLoader manipulation
+ - [S2-020](http://struts.apache.org/docs/s2-020.html) ClassLoader
manipulation
via request parameters
- - [S2-020](http://struts.apache.org/release/2.3.x/docs/s2-020.html) Commons
FileUpload library was upgraded
+ - [S2-020](http://struts.apache.org/docs/s2-020.html) Commons FileUpload
library was upgraded
to version 1.3.1 to prevent DoS attacks
All developers are strongly advised to perform this action.
Modified: struts/site/trunk/source/download.html
URL:
http://svn.apache.org/viewvc/struts/site/trunk/source/download.html?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/source/download.html (original)
+++ struts/site/trunk/source/download.html Sun Dec 7 15:16:53 2014
@@ -80,9 +80,9 @@ title: Download a Release
<li>Full Distribution:
<ul>
<li>
- <a href="[preferred]/struts/binaries/struts-{{ site.current_version
}}-all.zip">struts-{{ site.current_version }}-all.zip</a> (65MB)
- [<a href="http://www.apache.org/dist/struts/binaries/struts-{{
site.current_version }}-all.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/binaries/struts-{{
site.current_version }}-all.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/{{ site.current_version }}/struts-{{
site.current_version }}-all.zip">struts-{{ site.current_version }}-all.zip</a>
(65MB)
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-all.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-all.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -90,18 +90,18 @@ title: Download a Release
<li>Example Applications:
<ul>
<li>
- <a href="[preferred]/struts/examples/struts-{{ site.current_version
}}-apps.zip">struts-{{ site.current_version }}-apps.zip</a> (35MB)
- [<a href="http://www.apache.org/dist/struts/examples/struts-{{
site.current_version }}-apps.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/examples/struts-{{
site.current_version }}-apps.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/{{ site.current_version }}/struts-{{
site.current_version }}-apps.zip">struts-{{ site.current_version
}}-apps.zip</a> (35MB)
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-apps.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-apps.zip.md5">MD5</a>]
</li>
</ul>
</li>
<li>Essential Dependencies Only:
<ul>
<li>
- <a href="[preferred]/struts/library/struts-{{ site.current_version
}}-lib.zip">struts-{{ site.current_version }}-lib.zip</a> (19MB)
- [<a href="http://www.apache.org/dist/struts/library/struts-{{
site.current_version }}-lib.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/library/struts-{{
site.current_version }}-lib.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/{{ site.current_version }}/struts-{{
site.current_version }}-lib.zip">struts-{{ site.current_version }}-lib.zip</a>
(19MB)
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-lib.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-lib.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -109,18 +109,18 @@ title: Download a Release
<li>Documentation:
<ul>
<li>
- <a href="[preferred]/struts/documentation/struts-{{
site.current_version }}-docs.zip">struts-{{ site.current_version
}}-docs.zip</a> (13MB)
- [<a href="http://www.apache.org/dist/struts/documentation/struts-{{
site.current_version }}-docs.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/documentation/struts-{{
site.current_version }}-docs.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/{{ site.current_version }}/struts-{{
site.current_version }}-docs.zip">struts-{{ site.current_version
}}-docs.zip</a> (13MB)
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-docs.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-docs.zip.md5">MD5</a>]
</li>
</ul>
</li>
<li>Source:
<ul>
<li>
- <a href="[preferred]/struts/source/struts-{{ site.current_version
}}-src.zip">struts-{{ site.current_version }}-src.zip</a> (7MB)
- [<a href="http://www.apache.org/dist/struts/source/struts-{{
site.current_version }}-src.zip.asc">PGP</a>]
- [<a href="http://www.apache.org/dist/struts/source/struts-{{
site.current_version }}-src.zip.md5">MD5</a>]
+ <a href="[preferred]/struts/{{ site.current_version }}/struts-{{
site.current_version }}-src.zip">struts-{{ site.current_version }}-src.zip</a>
(7MB)
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-src.zip.asc">PGP</a>]
+ [<a href="http://www.apache.org/dist/struts/{{ site.current_version
}}/struts-{{ site.current_version }}-src.zip.md5">MD5</a>]
</li>
</ul>
</li>
@@ -146,9 +146,9 @@ title: Download a Release
<li>Full Distribution:
<ul>
<li>
- <a
href="[preferred]/struts/binaries/struts-1.3.10-all.zip">struts-1.3.10-all.zip</a>
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-1.3.10-all.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/binaries/struts-1.3.10-all.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/1.3.10/struts-1.3.10-all.zip">struts-1.3.10-all.zip</a>
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-all.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-all.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -156,9 +156,9 @@ title: Download a Release
<li>Library:
<ul>
<li>
- <a
href="[preferred]/struts/library/struts-1.3.10-lib.zip">struts-1.3.10-lib.zip</a>
- [<a
href="http://www.apache.org/dist/struts/library/struts-1.3.10-lib.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/library/struts-1.3.10-lib.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/1.3.10/struts-1.3.10-lib.zip">struts-1.3.10-lib.zip</a>
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-lib.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-lib.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -166,9 +166,9 @@ title: Download a Release
<li>Source:
<ul>
<li>
- <a
href="[preferred]/struts/source/struts-1.3.10-src.zip">struts-1.3.10-src.zip</a>
- [<a
href="http://www.apache.org/dist/struts/source/struts-1.3.10-src.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/source/struts-1.3.10-src.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/1.3.10/struts-1.3.10-src.zip">struts-1.3.10-src.zip</a>
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-src.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-src.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -176,9 +176,9 @@ title: Download a Release
<li>Examples:
<ul>
<li>
- <a
href="[preferred]/struts/examples/struts-1.3.10-apps.zip">struts-1.3.10-apps.zip</a>
- [<a
href="http://www.apache.org/dist/struts/examples/struts-1.3.10-apps.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/examples/struts-1.3.10-apps.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/1.3.10/struts-1.3.10-apps.zip">struts-1.3.10-apps.zip</a>
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-apps.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-apps.zip.md5";>MD5</a>]
</li>
</ul>
</li>
@@ -186,9 +186,9 @@ title: Download a Release
<li>Documentation:
<ul>
<li>
- <a
href="[preferred]/struts/documentation/struts-1.3.10-docs.zip">struts-1.3.10-docs.zip</a>
- [<a
href="http://www.apache.org/dist/struts/documentation/struts-1.3.10-docs.zip.asc";>PGP</a>]
- [<a
href="http://www.apache.org/dist/struts/documentation/struts-1.3.10-docs.zip.md5";>MD5</a>]
+ <a
href="[preferred]/struts/1.3.10/struts-1.3.10-docs.zip">struts-1.3.10-docs.zip</a>
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-docs.zip.asc";>PGP</a>]
+ [<a
href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-docs.zip.md5";>MD5</a>]
</li>
</ul>
</li>
