The Struts 2.3.16.3 test build is now available. It includes the
latest security patch which fixes one possible vulnerabilities:
- Extends excluded params in CookieInterceptor to avoid manipulation
of Struts' internals
For details and the rationale behind these changes, please consult the
correspo
+1
On May 2, 2014 3:52 PM, "Lukasz Lenart" wrote:
> The Struts 2.3.16.3 test build is now available. It includes the
> latest security patch which fixes one possible vulnerabilities:
> - Extends excluded params in CookieInterceptor to avoid manipulation
> of Struts' internals
>
> For details and
+1
On Fri, May 2, 2014 at 1:58 PM, Dave Newton wrote:
> +1
> On May 2, 2014 3:52 PM, "Lukasz Lenart" wrote:
>
> > The Struts 2.3.16.3 test build is now available. It includes the
> > latest security patch which fixes one possible vulnerabilities:
> > - Extends excluded params in CookieIntercep
+1
Cheers,
Paul
On Fri, May 2, 2014 at 4:16 PM, Don Brown wrote:
> +1
>
>
> On Fri, May 2, 2014 at 1:58 PM, Dave Newton wrote:
>
> > +1
> > On May 2, 2014 3:52 PM, "Lukasz Lenart" wrote:
> >
> > > The Struts 2.3.16.3 test build is now available. It includes the
> > > latest security patch w