+1 binding [ ] Leave at test build [ ] Alpha [ ] Beta [x] General Availability (GA)
Best Regards Johannes ################################################# web: http://www.jgeppert.com twitter: http://twitter.com/jogep 2014-12-02 16:20 GMT+01:00 Paul Benedict <pbened...@apache.org>: > +1 binding > On Dec 2, 2014 3:32 AM, "Christoph Nenning" <christoph.nenn...@lex-com.net > > > wrote: > > > +1, non binding > > > > [ ] Leave at test build > > [ ] Alpha > > [ ] Beta > > [X] General Availability (GA) > > > > > > regards, > > Christoph > > > > > > > > > > > > > > > > > > The Apache Struts 2.3.20 test build is now available. With this > release: > > > - merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3 > > > - implemented stronger random generator used to generate token's > > > values, S2-023 > > > - extended existing security mechanism to block access to given Java > > > packages and Classes, see #11 or read Internal security mechanism > > > - collection Parameters for RedirectResults, WW-4224 > > > - make ParametersInterceptor supports chinese in hash key by default, > > WW-4250 > > > - themes.properties can be loaded using ServletContext allows to put > > > template folder under WEB-INF or on classpath, WW-4260 > > > - new tag datetextfield, WW-3493 > > > - only valid Ognl expressions are cached, WW-4146 > > > - customTextProvider can be used for validation errors of model driven > > > actions, WW-4202 > > > - datetimepicker's label fixed, WW-4254 > > > - PropertiesJudge removed and properties are checked in > > > SecurityMemberAccess, WW-4257 > > > - resource reloading works in IBM JVM, WW-4266 > > > - default reloading settings were removed from default.properties, > > WW-4267 > > > - commons-fileupload library upgraded to version 1.3.1 to fix > > > potential security vulnerability, WW-4286 > > > - the scheme attribute accepts expressions in s:url tag, WW-4024 > > > - solves problem with infinite loop in FastByteArrayOutputStream, > > WW-4383 > > > - LocalizedTextUtil supports many ClassLoaders, WW-4379 > > > - Bill of Materials pom was introduced, WW-4326 > > > - debug=browser|console was migrated to jQuery, WW-4322 > > > - struts_dojo.js was fixed, WW-4349 > > > - interface org/apache/struts2/views/TagLibrary was restored and > > > marked as @Depreacted, WW-4255 > > > and many other small improvements, please see the release notes > > > > > > Security bulletin: > > > * [https://cwiki.apache.org/confluence/display/WW/S2-023] > > > > > > Release notes: > > > * [https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.20 > ] > > > > > > Distribution: > > > * [https://dist.apache.org/repos/dist/dev/struts/2.3.20/] > > > > > > Maven 2 staging repository: > > > * [https://repository.apache.org/content/repositories/staging/] > > > > > > Once you have had a chance to review the test build, please respond > > > with a vote on its quality: > > > > > > [ ] Leave at test build > > > [ ] Alpha > > > [ ] Beta > > > [ ] General Availability (GA) > > > > > > Everyone who has tested the build is invited to vote. Votes by PMC > > > members are considered binding. A vote passes if there are at least > > > three binding +1s and more +1s than -1s. > > > > > > The vote will remain open for at least 72 hours, longer upon request. > > > A vote can be amended at any time to upgrade or downgrade the quality > > > of the release based on future experience. If an initial vote > > > designates the build as "Beta", the release will be submitted for > > > mirroring and announced to the user list. Once released as a public > > > beta, subsequent quality votes on a build may be held on the user > > > list. > > > > > > As always, the act of voting carries certain obligations. A binding > > > vote not only states an opinion, but means that the voter is agreeing > > > to help do the work. > > > > > > > > > Kind regards > > > -- > > > Ćukasz > > > + 48 606 323 122 http://www.lenart.org.pl/ > > > > > > --------------------------------------------------------------------- > > > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org > > > For additional commands, e-mail: dev-h...@struts.apache.org > > > > > > > This Email was scanned by Sophos Anti Virus > > >