struts-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From lukaszlen...@apache.org
Subject svn commit: r1643681 [1/2] - in /struts/site/trunk: _config.yml source/announce.md source/download.html source/downloads.html source/index.html
Date Sun, 07 Dec 2014 15:16:53 GMT
Author: lukaszlenart
Date: Sun Dec  7 15:16:53 2014
New Revision: 1643681

URL: http://svn.apache.org/r1643681
Log:
Updates site with notes about 2.3.20 version

Modified:
    struts/site/trunk/_config.yml
    struts/site/trunk/source/announce.md
    struts/site/trunk/source/download.html
    struts/site/trunk/source/downloads.html
    struts/site/trunk/source/index.html

Modified: struts/site/trunk/_config.yml
URL: http://svn.apache.org/viewvc/struts/site/trunk/_config.yml?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/_config.yml (original)
+++ struts/site/trunk/_config.yml Sun Dec  7 15:16:53 2014
@@ -12,7 +12,7 @@ encoding: UTF-8
 root:
 
 # Simplifies introducing changes related to the latest release
-current_version: 2.3.16.3
-current_version_short: 23163
-release_date: 3 may 2014
-release_date_short: 20140503
+current_version: 2.3.20
+current_version_short: 2320
+release_date: 7 december 2014
+release_date_short: 20141207

Modified: struts/site/trunk/source/announce.md
URL: http://svn.apache.org/viewvc/struts/site/trunk/source/announce.md?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/source/announce.md (original)
+++ struts/site/trunk/source/announce.md Sun Dec  7 15:16:53 2014
@@ -8,6 +8,53 @@ title: Announcements
   Skip to: <a href="announce-2013.html">Announcements - 2013</a>
 </p>
 
+#### <span id="a20141207"> 12 December 2014 - Struts 2.3.20 General Availability with
Security Fix Release
+
+The Apache Struts group is pleased to announce that Struts 2.3.20 is available as a "General
Availability"
+release. The GA designation is our highest quality grade.
+
+Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web
applications.
+The framework is designed to streamline the full development cycle, from building, to deploying,
+to maintaining applications over time.
+
+One medium security issue was solved with this release:
+
+  - [S2-023](http://struts.apache.org/docs/s2-023.html)
+    Generated value of token can be predictable
+
+Besides that, this release contains several fixes and improvements just to mention few of
them:
+
+  - merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
+  - extended existing security mechanism to block access to given Java packages and Classes
+  - collection Parameters for `RedirectResult`
+  - make `ParametersInterceptor` supports chinese in hash key by default
+  - `themes.properties` can be loaded using `ServletContext` allows to put template folder
under WEB-INF or on classpath
+  - new tag `datetextfield`
+  - only valid Ognl expressions are cached
+  - custom `TextProvider` can be used for validation errors of model driven actions
+  - `datetimepicker`'s label fixed
+  - `PropertiesJudge` removed and properties are checked in `SecurityMemberAccess`
+  - resource reloading works in IBM JVM
+  - default reloading settings were removed from default.properties
+  - `commons-fileupload` library upgraded to version 1.3.1 to fix potential security vulnerability
+  - the scheme attribute accepts expressions in `s:url` tag
+  - solves problem with infinite loop in `FastByteArrayOutputStream`
+  - `LocalizedTextUtil` supports many ClassLoaders
+  - Bill of Materials pom was introduced
+  - `debug=browser|console` was migrated to jQuery
+  - `struts_dojo.js` was fixed
+  - interface `org/apache/struts2/views/TagLibrary` was restored and marked as `@Depreacted`
+
+and many other small improvements, please careful read the [version notes](http://struts.apache.org/docs/version-notes-2320.html).
+
+**All developers are strongly advised to perform this action.**
+
+The 2.3.x series of the Apache Struts framework has a minimum requirement of the following
specification versions:
+Servlet API 2.4, JSP API 2.0, and Java 5.
+
+Should any issues arise with your use of any version of the Struts framework,
+please post your comments to the user list, and, if appropriate, file a tracking ticket.
+
 #### <span id="a20140503"> 3 May 2014 - Struts 2.3.16.3 General Availability Release
- Security Fix Release
 
 The Apache Struts group is pleased to announce that Struts 2.3.16.3 is available as a "General
Availability"
@@ -19,7 +66,7 @@ to maintaining applications over time.
 
 One medium security issue was solved with this release:
 
-  - [S2-022](http://struts.apache.org/release/2.3.x/docs/s2-022.html)
+  - [S2-022](http://struts.apache.org/docs/s2-022.html)
     Extends excluded params in CookieInterceptor to avoid manipulation of Struts' internals
 
 All developers are strongly advised to perform this action.
@@ -35,9 +82,9 @@ to maintaining applications over time.
 
 Two security issues were solved with this release:
 
-  - [S2-021](http://struts.apache.org/release/2.3.x/docs/s2-021.html)
+  - [S2-021](http://struts.apache.org/docs/s2-021.html)
     Improves excluded params to avoid ClassLoader manipulation via ParametersInterceptor
-  - [S2-021](http://struts.apache.org/release/2.3.x/docs/s2-021.html)
+  - [S2-021](http://struts.apache.org/docs/s2-021.html)
     Adds excluded params to CookieInterceptor to avoid ClassLoader manipulation when the
interceptors is configured
     to accept all cookie names (wildcard matching via "*")
 
@@ -99,9 +146,9 @@ to maintaining applications over time.
 
 Two security issues were solved with this release:
 
-  - [S2-020](http://struts.apache.org/release/2.3.x/docs/s2-020.html) ClassLoader manipulation
+  - [S2-020](http://struts.apache.org/docs/s2-020.html) ClassLoader manipulation
     via request parameters
-  - [S2-020](http://struts.apache.org/release/2.3.x/docs/s2-020.html) Commons FileUpload
library was upgraded
+  - [S2-020](http://struts.apache.org/docs/s2-020.html) Commons FileUpload library was upgraded
     to version 1.3.1 to prevent DoS attacks
 
 All developers are strongly advised to perform this action.

Modified: struts/site/trunk/source/download.html
URL: http://svn.apache.org/viewvc/struts/site/trunk/source/download.html?rev=1643681&r1=1643680&r2=1643681&view=diff
==============================================================================
--- struts/site/trunk/source/download.html (original)
+++ struts/site/trunk/source/download.html Sun Dec  7 15:16:53 2014
@@ -80,9 +80,9 @@ title: Download a Release
   <li>Full Distribution:
     <ul>
       <li>
-        <a href="[preferred]/struts/binaries/struts-{{ site.current_version }}-all.zip">struts-{{
site.current_version }}-all.zip</a> (65MB)
-        [<a href="http://www.apache.org/dist/struts/binaries/struts-{{ site.current_version
}}-all.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/binaries/struts-{{ site.current_version
}}-all.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/{{ site.current_version }}/struts-{{ site.current_version
}}-all.zip">struts-{{ site.current_version }}-all.zip</a> (65MB)
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-all.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-all.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -90,18 +90,18 @@ title: Download a Release
   <li>Example Applications:
     <ul>
       <li>
-        <a href="[preferred]/struts/examples/struts-{{ site.current_version }}-apps.zip">struts-{{
site.current_version }}-apps.zip</a> (35MB)
-        [<a href="http://www.apache.org/dist/struts/examples/struts-{{ site.current_version
}}-apps.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/examples/struts-{{ site.current_version
}}-apps.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/{{ site.current_version }}/struts-{{ site.current_version
}}-apps.zip">struts-{{ site.current_version }}-apps.zip</a> (35MB)
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-apps.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-apps.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
   <li>Essential Dependencies Only:
     <ul>
       <li>
-        <a href="[preferred]/struts/library/struts-{{ site.current_version }}-lib.zip">struts-{{
site.current_version }}-lib.zip</a> (19MB)
-        [<a href="http://www.apache.org/dist/struts/library/struts-{{ site.current_version
}}-lib.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/library/struts-{{ site.current_version
}}-lib.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/{{ site.current_version }}/struts-{{ site.current_version
}}-lib.zip">struts-{{ site.current_version }}-lib.zip</a> (19MB)
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-lib.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-lib.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -109,18 +109,18 @@ title: Download a Release
   <li>Documentation:
     <ul>
       <li>
-        <a href="[preferred]/struts/documentation/struts-{{ site.current_version }}-docs.zip">struts-{{
site.current_version }}-docs.zip</a> (13MB)
-        [<a href="http://www.apache.org/dist/struts/documentation/struts-{{ site.current_version
}}-docs.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/documentation/struts-{{ site.current_version
}}-docs.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/{{ site.current_version }}/struts-{{ site.current_version
}}-docs.zip">struts-{{ site.current_version }}-docs.zip</a> (13MB)
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-docs.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-docs.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
   <li>Source:
     <ul>
       <li>
-        <a href="[preferred]/struts/source/struts-{{ site.current_version }}-src.zip">struts-{{
site.current_version }}-src.zip</a> (7MB)
-        [<a href="http://www.apache.org/dist/struts/source/struts-{{ site.current_version
}}-src.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/source/struts-{{ site.current_version
}}-src.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/{{ site.current_version }}/struts-{{ site.current_version
}}-src.zip">struts-{{ site.current_version }}-src.zip</a> (7MB)
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-src.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/{{ site.current_version }}/struts-{{
site.current_version }}-src.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -146,9 +146,9 @@ title: Download a Release
   <li>Full Distribution:
     <ul>
       <li>
-        <a href="[preferred]/struts/binaries/struts-1.3.10-all.zip">struts-1.3.10-all.zip</a>
-        [<a href="http://www.apache.org/dist/struts/binaries/struts-1.3.10-all.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/binaries/struts-1.3.10-all.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/1.3.10/struts-1.3.10-all.zip">struts-1.3.10-all.zip</a>
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-all.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-all.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -156,9 +156,9 @@ title: Download a Release
   <li>Library:
     <ul>
       <li>
-        <a href="[preferred]/struts/library/struts-1.3.10-lib.zip">struts-1.3.10-lib.zip</a>
-        [<a href="http://www.apache.org/dist/struts/library/struts-1.3.10-lib.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/library/struts-1.3.10-lib.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/1.3.10/struts-1.3.10-lib.zip">struts-1.3.10-lib.zip</a>
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-lib.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-lib.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -166,9 +166,9 @@ title: Download a Release
   <li>Source:
     <ul>
       <li>
-        <a href="[preferred]/struts/source/struts-1.3.10-src.zip">struts-1.3.10-src.zip</a>
-        [<a href="http://www.apache.org/dist/struts/source/struts-1.3.10-src.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/source/struts-1.3.10-src.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/1.3.10/struts-1.3.10-src.zip">struts-1.3.10-src.zip</a>
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-src.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-src.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -176,9 +176,9 @@ title: Download a Release
   <li>Examples:
     <ul>
       <li>
-        <a href="[preferred]/struts/examples/struts-1.3.10-apps.zip">struts-1.3.10-apps.zip</a>
-        [<a href="http://www.apache.org/dist/struts/examples/struts-1.3.10-apps.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/examples/struts-1.3.10-apps.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/1.3.10/struts-1.3.10-apps.zip">struts-1.3.10-apps.zip</a>
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-apps.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-apps.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>
@@ -186,9 +186,9 @@ title: Download a Release
   <li>Documentation:
     <ul>
       <li>
-        <a href="[preferred]/struts/documentation/struts-1.3.10-docs.zip">struts-1.3.10-docs.zip</a>
-        [<a href="http://www.apache.org/dist/struts/documentation/struts-1.3.10-docs.zip.asc">PGP</a>]
-        [<a href="http://www.apache.org/dist/struts/documentation/struts-1.3.10-docs.zip.md5">MD5</a>]
+        <a href="[preferred]/struts/1.3.10/struts-1.3.10-docs.zip">struts-1.3.10-docs.zip</a>
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-docs.zip.asc">PGP</a>]
+        [<a href="http://www.apache.org/dist/struts/1.3.10/struts-1.3.10-docs.zip.md5">MD5</a>]
       </li>
     </ul>
   </li>



Mime
View raw message