You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@struts.apache.org by lu...@apache.org on 2014/02/21 08:29:35 UTC
svn commit: r898745 [6/19] - in /websites/production/struts/content: ./
bootstrap/ bootstrap/css/ bootstrap/fonts/ bootstrap/js/ css/
development/2.x/ development/2.x/docs/
development/2.x/docs/sitegraph-plugin.thumbs/
development/2.x/struts2-core/apid...
Modified: websites/production/struts/content/announce-2011.html
==============================================================================
--- websites/production/struts/content/announce-2011.html (original)
+++ websites/production/struts/content/announce-2011.html Fri Feb 21 07:29:33 2014
@@ -1,408 +1,308 @@
<!DOCTYPE html>
-<!--
- | Generated by Apache Maven Doxia at Jan 15, 2014
- | Rendered using Apache Maven Fluido Skin 1.3.0
--->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta charset="UTF-8" />
- <meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20140115" />
- <meta http-equiv="Content-Language" content="en" />
- <title>
- Announcements</title>
- <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
- <link rel="stylesheet" href="./css/site.css" />
- <link rel="stylesheet" href="./css/print.css" media="print" />
-
-
- <script type="text/javascript" src="./js/apache-maven-fluido-1.3.0.min.js"></script>
-
-
- </head>
- <body class="topBarEnabled">
-
-
-
-
-
-
- <a href="http://github.com/apache/struts2">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
-
-
-
-
-
- <div id="topbar" class="navbar navbar-fixed-top ">
- <div class="navbar-inner">
- <div class="container"><div class="nav-collapse">
-
-
- <ul class="nav">
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Apache Struts <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="index.html" title="Welcome">Welcome</a>
-</li>
-
- <li> <a href="downloads.html" title="Downloads">Downloads</a>
-</li>
-
- <li> <a href="announce.html" title="Announcements">Announcements</a>
-</li>
-
- <li> <a href="http://www.apache.org/licenses/" title="License">License</a>
-</li>
-
- <li> <a href="http://apache.org/foundation/thanks.html" title="Thanks!">Thanks!</a>
-</li>
-
- <li> <a href="http://apache.org/foundation/sponsorship.html" title="Sponsorship">Sponsorship</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Support <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="mail.html" title="User Mailing List">User Mailing List</a>
-</li>
-
- <li> <a href="https://issues.apache.org/jira/browse/WW" title="Issue Tracker">Issue Tracker</a>
-</li>
-
- <li> <a href="security.html" title="Reporting Security Issues">Reporting Security Issues</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="birdseye.html" title="Birds Eye">Birds Eye</a>
-</li>
-
- <li> <a href="primer.html" title="Key Technologies">Key Technologies</a>
-</li>
-
- <li> <a href="kickstart.html" title="Kickstart FAQ">Kickstart FAQ</a>
-</li>
-
- <li> <a href="https://cwiki.apache.org/confluence/display/WW/Home" title="Wiki">Wiki</a>
-</li>
-
- <li> <a href="../release/2.3.x/index.html" title="Struts 2">Struts 2</a>
-</li>
-
- <li> <a href="../release/1.3.x/index.html" title="Struts 1">Struts 1</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Contributing <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="youatstruts.html" title="You at Struts">You at Struts</a>
-</li>
-
- <li> <a href="helping.html" title="How to Help FAQ">How to Help FAQ</a>
-</li>
-
- <li> <a href="dev/dev-mail.html" title="Development Lists">Development Lists</a>
-</li>
-
- <li> <a href="dev/git-for-struts.html" title="Git for Struts">Git for Struts</a>
-</li>
-
- <li> <a href="dev/troubleshooting-git-svn.html" title="Troubleshooting Git-Svn">Troubleshooting Git-Svn</a>
-</li>
-
- <li> <a href="dev/builds.html" title="Source Code">Source Code</a>
-</li>
-
- <li> <a href="dev/releases.html" title="Release Guidelines">Release Guidelines</a>
-</li>
-
- <li> <a href="dev/bylaws.html" title="PMC Charter">PMC Charter</a>
-</li>
-
- <li> <a href="dev/volunteers.html" title="Volunteers">Volunteers</a>
-</li>
-
- <li> <a href="http://svn.apache.org/viewvc/struts/" title="Source Repository">Source Repository</a>
-</li>
- </ul>
- </li>
- </ul>
-
-
-
-
- </div>
-
- </div>
+<html>
+<head>
+ <meta charset="UTF-8"/>
+ <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+ <meta name="Date-Revision-yyyymmdd" content="20140206"/>
+ <meta http-equiv="Content-Language" content="en"/>
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+
+ <title>Announcements 2011</title>
+
+ <link rel="stylesheet" href="/bootstrap/css/bootstrap.min.css">
+ <link rel="stylesheet" href="/css/main.css">
+
+ <script type="text/javascript" src="/js/jquery-1.11.0.min.js"></script>
+ <script type="text/javascript" src="/bootstrap/js/bootstrap.js"></script>
+ <script type="text/javascript" src="/js/community.js"></script>
+</head>
+<body>
+
+<a href="http://github.com/apache/struts">
+ <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;" src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png" alt="Fork me on GitHub">
+</a>
+
+<header>
+ <!-- Fixed navbar -->
+<nav>
+ <div class="navbar navbar-default navbar-fixed-top" role="navigation">
+ <div class="container">
+ <div class="navbar-collapse collapse">
+ <ul class="nav navbar-nav">
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Apache Struts <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="index.html">Welcome</a></li>
+ <li><a href="downloads.html">Downloads</a></li>
+ <li><a href="announce.html">Announcements</a></li>
+ <li><a href="http://www.apache.org/licenses/">License</a></li>
+ <li><a href="http://apache.org/foundation/thanks.html">Thanks!</a></li>
+ <li><a href="http://apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Support <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="mail.html">User Mailing List</a></li>
+ <li><a href="https://issues.apache.org/jira/browse/WW">Issue Tracker</a></li>
+ <li><a href="security.html">Reporting Security Issues</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Documentation <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="birdseye.html">Birds Eye</a></li>
+ <li><a href="primer.html">Key Technologies</a></li>
+ <li><a href="kickstart.html">Kickstart FAQ</a></li>
+ <li><a href="https://cwiki.apache.org/confluence/display/WW/Home">Wiki</a></li>
+ <li><a href="http://struts.apache.org/release/2.3.x/index.html">Struts 2</a></li>
+ <li><a href="http://struts.apache.org/release/1.3.x/index.html">Struts 1</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Contributing <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="youatstruts.html">You at Struts</a></li>
+ <li><a href="helping.html">How to Help FAQ</a></li>
+ <li><a href="dev-mail.html">Development Lists</a></li>
+ <li class="divider"></li>
+ <li><a href="git-for-struts.html">Git for Struts</a></li>
+ <li><a href="builds.html">Source Code</a></li>
+ <li><a href="coding-standards.html">Coding standards</a></li>
+ <li class="divider"></li>
+ <li><a href="releases.html">Release Guidelines</a></li>
+ <li><a href="bylaws.html">PMC Charter</a></li>
+ <li><a href="volunteers.html">Volunteers</a></li>
+ <li><a href="https://git-wip-us.apache.org/repos/asf?p=struts.git">Source Repository</a></li>
+ </ul>
+ </li>
+
+ </ul>
</div>
+ <!--/.nav-collapse -->
</div>
-
- <div class="container">
- <div id="banner">
- <div class="pull-left">
- <a href="../" id="bannerLeft">
- <img src="images/struts.gif" alt="Apache Struts"/>
- </a>
- </div>
- <div class="pull-right"> <a href="http://www.apache.org" id="bannerRight">
- <img src="images/asf-logo.gif" alt="Apache Software Foundation"/>
- </a>
+ </div>
+</nav>
+
+ <div class="container">
+ <div class="row">
+ <div class="pull-left">
+ <a href="/" id="bannerLeft">
+ <img src="/img/struts.gif" alt="Apache Struts"/>
+ </a>
</div>
- <div class="clear"><hr/></div>
+ <div class="pull-right"><a href="http://www.apache.org" id="bannerRight">
+ <img src="/img/asf-logo.gif" alt="Apache Software Foundation"/>
+ </a>
</div>
+ </div>
+ </div>
+</header>
- <div id="breadcrumbs">
- <ul class="breadcrumb">
-
-
- <li id="publishDate">Last Published: 2014-01-15</li>
-
-
-
-
- </ul>
- </div>
-
-
- <div id="bodyColumn" >
-
- <!-- Copyright 1999-2009 The Apache Software Foundation
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License. --><!-- // ======================================================================== 78 -->
-
-
-
- <div class="section"><h2>Announcements<a name="Announcements"></a></h2>
- <p class="right">
- Skip to: <a href="announce-2010.html">Announcements - 2010</a>
- </p>
- <div class="section"><div class="section"><h4 id="a20111225">25 December 2011 - Struts 2.3.1.1 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.1.1 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- An important vulnerability were solved with this release:
- </p><ul>
- <li>
- Remote command execution and arbitrary file overwrite
- </li>
- <li>
- Strict DMI mode does not work correctly
- </li>
- </ul>
-
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.1.1.
- </p>
- <p>
- Struts 2.3.1.1 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts2311">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-2311.html">release notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20111218">18 December 2011 - Struts 2.0.14 End of Life Announcement</h4>
- <p>
- The Apache Struts Team likes to inform you that the Struts 2.0 branch has reached it's end of life
- and is no longer supported. All users of Struts 2.0.14 or earlier Struts 2 versions are strongly
- advised to update their existing applications to Struts 2.3.x.
- </p>
- <p>
- Struts 2.0.14 was for some time maintained in parallel to the 2.1 and 2.2 branches, since Struts 2.1
- introduced some API and plugin changes that were likely to break existing user code on top of Struts 2.
- However, the community interest in maintaining the Struts 2.0.x branch was not strong enough to
- keep it sufficiently up to date, especially in terms of security fixes. There are several serious
- security problems that, while being continuously addressed in later Struts 2 versions, did not make
- it into the 2.0.x branch. For that reason the Apache Struts PMC decided to remove 2.0.14 as a supported
- version.
- </p>
- <p>
- For more information on how to upgrade existing applications running on top of Struts 2.0.x to
- Struts 2.1 and later, please read the
- <a class="externalLink" href="https://cwiki.apache.org/confluence/display/S2WIKI/Troubleshooting+guide+migrating+from+Struts+2.0.x+to+2.1.x">
- Guide to migrating from Struts 2.0.x to 2.1.x</a>.
- </p>
-
-
- </div><div class="section"><h4 id="a20111212">12 December 2011 - Struts 2.3.1 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.1 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- Some new futures are:
- </p><ul>
- <li>
- New Portlet 2.0 (JSR 286) plugin replaced the Portlet 1.0 (JSR 168) plugin
- </li>
- <li>
- New CDI plugin was added to allow use CDI (JavaEE 6) as an Object Factory in Struts 2
- </li>
- <li>
- The dependencies of the Struts2-Spring plugin were upgraded from Spring 2.5 to 3.0
- </li>
- </ul>
- Besides that, various other bug fixes, improvements and security enhancements have been incorporated.
-
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.1.
- </p>
- <p>
- Struts 2.3.1 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts231">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.3.1/docs/version-notes-231.html">release notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20111007">7 September 2011 - Struts 2.2.3.1 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.2.3.1 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- An important vulnerability were solved with this release:
- </p><ul>
- <li>
- User input was evaluated as an OGNL expression when there's a conversion error.
- </li>
- </ul>
-
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.2.3.1.
- </p>
- <p>
- Struts 2.2.3.1 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts2231">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.2.3.1/docs/version-notes-2231.html">release notes</a>
- are available online.
- </p>
- <p>
- The 2.2.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
- </div></div></div>
- <div class="section"><h2><a name="null"></a></h2>
- <p class="right">
- Skip to: <a href="announce-2010.html">Announcements - 2010</a>
- </p>
-
- <p class="right">
- <b>Next:</b>
- <a href="kickstart.html">Kickstart FAQ</a>
- </p>
- </div>
-
-
-
- </div>
- </div>
-
- <hr/>
-
- <footer>
- <div class="container">
- <div class="row span12">Copyright © 2000-2014
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
+<article class="container">
+ <section class="col-md-12">
+ <h1>Announcements - 2011</h1>
+
+<p class="pull-right">
+ Skip to: <a href="announce-2010.html">Announcements - 2010</a>
+</p>
+
+<h4 id="a20111225">25 December 2011 - Struts 2.3.1.1 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.1.1 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ An important vulnerability were solved with this release:
+<ul>
+ <li>
+ Remote command execution and arbitrary file overwrite
+ </li>
+ <li>
+ Strict DMI mode does not work correctly
+ </li>
+</ul>
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.1.1.
+</p>
+<p>
+ Struts 2.3.1.1 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts2311">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-2311.html">release notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20111218">18 December 2011 - Struts 2.0.14 End of Life Announcement</h4>
+<p>
+ The Apache Struts Team likes to inform you that the Struts 2.0 branch has reached it's end of life
+ and is no longer supported. All users of Struts 2.0.14 or earlier Struts 2 versions are strongly
+ advised to update their existing applications to Struts 2.3.x.
+</p>
+<p>
+ Struts 2.0.14 was for some time maintained in parallel to the 2.1 and 2.2 branches, since Struts 2.1
+ introduced some API and plugin changes that were likely to break existing user code on top of Struts 2.
+ However, the community interest in maintaining the Struts 2.0.x branch was not strong enough to
+ keep it sufficiently up to date, especially in terms of security fixes. There are several serious
+ security problems that, while being continuously addressed in later Struts 2 versions, did not make
+ it into the 2.0.x branch. For that reason the Apache Struts PMC decided to remove 2.0.14 as a supported
+ version.
+</p>
+<p>
+ For more information on how to upgrade existing applications running on top of Struts 2.0.x to
+ Struts 2.1 and later, please read the
+ <a href="https://cwiki.apache.org/confluence/display/S2WIKI/Troubleshooting+guide+migrating+from+Struts+2.0.x+to+2.1.x">
+ Guide to migrating from Struts 2.0.x to 2.1.x</a>.
+</p>
+
+
+<h4 id="a20111212">12 December 2011 - Struts 2.3.1 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.1 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ Some new futures are:
+<ul>
+ <li>
+ New Portlet 2.0 (JSR 286) plugin replaced the Portlet 1.0 (JSR 168) plugin
+ </li>
+ <li>
+ New CDI plugin was added to allow use CDI (JavaEE 6) as an Object Factory in Struts 2
+ </li>
+ <li>
+ The dependencies of the Struts2-Spring plugin were upgraded from Spring 2.5 to 3.0
+ </li>
+</ul>
+Besides that, various other bug fixes, improvements and security enhancements have been incorporated.
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.1.
+</p>
+<p>
+ Struts 2.3.1 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts231">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.3.1/docs/version-notes-231.html">release notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20111007">7 September 2011 - Struts 2.2.3.1 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.2.3.1 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ An important vulnerability were solved with this release:
+<ul>
+ <li>
+ User input was evaluated as an OGNL expression when there's a conversion error.
+ </li>
+</ul>
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.2.3.1.
+</p>
+<p>
+ Struts 2.2.3.1 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts2231">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.2.3.1/docs/version-notes-2231.html">release notes</a>
+ are available online.
+</p>
+<p>
+ The 2.2.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<p class="pull-right">
+ Skip to: <a href="announce-2010.html">Announcements - 2010</a>
+</p>
+
+<p class="pull-left">
+ <strong>Next:</strong>
+ <a href="kickstart.html">Kickstart FAQ</a>
+</p>
+
+ </section>
+</article>
+
+ <hr/>
+<footer class="container">
+ <div class="row col-md-12 text-center">
+ Copyright © 2000-2014 <a href="http://www.apache.org/">The Apache Software Foundation</a>. All Rights Reserved.
+ </div>
+ <div class="row col-md-12 text-center">
+ Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts
+ project logos are trademarks of The Apache Software Foundation.
+ </div>
+</footer>
- <?xml version="1.0" encoding="UTF-8"?>
-<div class="row span12">Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts
- project logos are trademarks of The Apache Software Foundation.</div>
-
- <p id="poweredBy" class="pull-right">
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
- </p>
-
- </div>
- </footer>
- </body>
+
+</body>
</html>
Modified: websites/production/struts/content/announce-2012.html
==============================================================================
--- websites/production/struts/content/announce-2012.html (original)
+++ websites/production/struts/content/announce-2012.html Fri Feb 21 07:29:33 2014
@@ -1,509 +1,407 @@
<!DOCTYPE html>
-<!--
- | Generated by Apache Maven Doxia at Jan 15, 2014
- | Rendered using Apache Maven Fluido Skin 1.3.0
--->
-<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
- <head>
- <meta charset="UTF-8" />
- <meta name="viewport" content="width=device-width, initial-scale=1.0" />
- <meta name="Date-Revision-yyyymmdd" content="20140115" />
- <meta http-equiv="Content-Language" content="en" />
- <title>
- Announcements</title>
- <link rel="stylesheet" href="./css/apache-maven-fluido-1.3.0.min.css" />
- <link rel="stylesheet" href="./css/site.css" />
- <link rel="stylesheet" href="./css/print.css" media="print" />
-
-
- <script type="text/javascript" src="./js/apache-maven-fluido-1.3.0.min.js"></script>
-
-
- </head>
- <body class="topBarEnabled">
-
-
-
-
-
-
- <a href="http://github.com/apache/struts2">
- <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;"
- src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png"
- alt="Fork me on GitHub">
- </a>
-
-
-
-
-
- <div id="topbar" class="navbar navbar-fixed-top ">
- <div class="navbar-inner">
- <div class="container"><div class="nav-collapse">
-
-
- <ul class="nav">
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Apache Struts <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="index.html" title="Welcome">Welcome</a>
-</li>
-
- <li> <a href="downloads.html" title="Downloads">Downloads</a>
-</li>
-
- <li> <a href="announce.html" title="Announcements">Announcements</a>
-</li>
-
- <li> <a href="http://www.apache.org/licenses/" title="License">License</a>
-</li>
-
- <li> <a href="http://apache.org/foundation/thanks.html" title="Thanks!">Thanks!</a>
-</li>
-
- <li> <a href="http://apache.org/foundation/sponsorship.html" title="Sponsorship">Sponsorship</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Support <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="mail.html" title="User Mailing List">User Mailing List</a>
-</li>
-
- <li> <a href="https://issues.apache.org/jira/browse/WW" title="Issue Tracker">Issue Tracker</a>
-</li>
-
- <li> <a href="security.html" title="Reporting Security Issues">Reporting Security Issues</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Documentation <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="birdseye.html" title="Birds Eye">Birds Eye</a>
-</li>
-
- <li> <a href="primer.html" title="Key Technologies">Key Technologies</a>
-</li>
-
- <li> <a href="kickstart.html" title="Kickstart FAQ">Kickstart FAQ</a>
-</li>
-
- <li> <a href="https://cwiki.apache.org/confluence/display/WW/Home" title="Wiki">Wiki</a>
-</li>
-
- <li> <a href="../release/2.3.x/index.html" title="Struts 2">Struts 2</a>
-</li>
-
- <li> <a href="../release/1.3.x/index.html" title="Struts 1">Struts 1</a>
-</li>
- </ul>
- </li>
- <li class="dropdown">
- <a href="#" class="dropdown-toggle" data-toggle="dropdown">Contributing <b class="caret"></b></a>
- <ul class="dropdown-menu">
-
- <li> <a href="youatstruts.html" title="You at Struts">You at Struts</a>
-</li>
-
- <li> <a href="helping.html" title="How to Help FAQ">How to Help FAQ</a>
-</li>
-
- <li> <a href="dev/dev-mail.html" title="Development Lists">Development Lists</a>
-</li>
-
- <li> <a href="dev/git-for-struts.html" title="Git for Struts">Git for Struts</a>
-</li>
-
- <li> <a href="dev/troubleshooting-git-svn.html" title="Troubleshooting Git-Svn">Troubleshooting Git-Svn</a>
-</li>
-
- <li> <a href="dev/builds.html" title="Source Code">Source Code</a>
-</li>
-
- <li> <a href="dev/releases.html" title="Release Guidelines">Release Guidelines</a>
-</li>
-
- <li> <a href="dev/bylaws.html" title="PMC Charter">PMC Charter</a>
-</li>
-
- <li> <a href="dev/volunteers.html" title="Volunteers">Volunteers</a>
-</li>
-
- <li> <a href="http://svn.apache.org/viewvc/struts/" title="Source Repository">Source Repository</a>
-</li>
- </ul>
- </li>
- </ul>
-
-
-
-
- </div>
-
- </div>
+<html>
+<head>
+ <meta charset="UTF-8"/>
+ <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+ <meta name="Date-Revision-yyyymmdd" content="20140206"/>
+ <meta http-equiv="Content-Language" content="en"/>
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+
+ <title>Announcements 2012</title>
+
+ <link rel="stylesheet" href="/bootstrap/css/bootstrap.min.css">
+ <link rel="stylesheet" href="/css/main.css">
+
+ <script type="text/javascript" src="/js/jquery-1.11.0.min.js"></script>
+ <script type="text/javascript" src="/bootstrap/js/bootstrap.js"></script>
+ <script type="text/javascript" src="/js/community.js"></script>
+</head>
+<body>
+
+<a href="http://github.com/apache/struts">
+ <img style="position: absolute; top: 0; right: 0; border: 0; z-index: 10000;" src="https://s3.amazonaws.com/github/ribbons/forkme_right_red_aa0000.png" alt="Fork me on GitHub">
+</a>
+
+<header>
+ <!-- Fixed navbar -->
+<nav>
+ <div class="navbar navbar-default navbar-fixed-top" role="navigation">
+ <div class="container">
+ <div class="navbar-collapse collapse">
+ <ul class="nav navbar-nav">
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Apache Struts <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="index.html">Welcome</a></li>
+ <li><a href="downloads.html">Downloads</a></li>
+ <li><a href="announce.html">Announcements</a></li>
+ <li><a href="http://www.apache.org/licenses/">License</a></li>
+ <li><a href="http://apache.org/foundation/thanks.html">Thanks!</a></li>
+ <li><a href="http://apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Support <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="mail.html">User Mailing List</a></li>
+ <li><a href="https://issues.apache.org/jira/browse/WW">Issue Tracker</a></li>
+ <li><a href="security.html">Reporting Security Issues</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Documentation <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="birdseye.html">Birds Eye</a></li>
+ <li><a href="primer.html">Key Technologies</a></li>
+ <li><a href="kickstart.html">Kickstart FAQ</a></li>
+ <li><a href="https://cwiki.apache.org/confluence/display/WW/Home">Wiki</a></li>
+ <li><a href="http://struts.apache.org/release/2.3.x/index.html">Struts 2</a></li>
+ <li><a href="http://struts.apache.org/release/1.3.x/index.html">Struts 1</a></li>
+ </ul>
+ </li>
+
+ <li class="dropdown">
+ <a class="dropdown-toggle" data-toggle="dropdown" href="#">Contributing <b class="caret"></b></a>
+ <ul class="dropdown-menu">
+ <li><a href="youatstruts.html">You at Struts</a></li>
+ <li><a href="helping.html">How to Help FAQ</a></li>
+ <li><a href="dev-mail.html">Development Lists</a></li>
+ <li class="divider"></li>
+ <li><a href="git-for-struts.html">Git for Struts</a></li>
+ <li><a href="builds.html">Source Code</a></li>
+ <li><a href="coding-standards.html">Coding standards</a></li>
+ <li class="divider"></li>
+ <li><a href="releases.html">Release Guidelines</a></li>
+ <li><a href="bylaws.html">PMC Charter</a></li>
+ <li><a href="volunteers.html">Volunteers</a></li>
+ <li><a href="https://git-wip-us.apache.org/repos/asf?p=struts.git">Source Repository</a></li>
+ </ul>
+ </li>
+
+ </ul>
</div>
+ <!--/.nav-collapse -->
</div>
-
- <div class="container">
- <div id="banner">
- <div class="pull-left">
- <a href="../" id="bannerLeft">
- <img src="images/struts.gif" alt="Apache Struts"/>
- </a>
- </div>
- <div class="pull-right"> <a href="http://www.apache.org" id="bannerRight">
- <img src="images/asf-logo.gif" alt="Apache Software Foundation"/>
- </a>
+ </div>
+</nav>
+
+ <div class="container">
+ <div class="row">
+ <div class="pull-left">
+ <a href="/" id="bannerLeft">
+ <img src="/img/struts.gif" alt="Apache Struts"/>
+ </a>
</div>
- <div class="clear"><hr/></div>
+ <div class="pull-right"><a href="http://www.apache.org" id="bannerRight">
+ <img src="/img/asf-logo.gif" alt="Apache Software Foundation"/>
+ </a>
</div>
+ </div>
+ </div>
+</header>
- <div id="breadcrumbs">
- <ul class="breadcrumb">
-
-
- <li id="publishDate">Last Published: 2014-01-15</li>
-
-
-
-
- </ul>
- </div>
-
-
- <div id="bodyColumn" >
-
- <!-- Copyright 1999-2009 The Apache Software Foundation
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License. --><!-- // ======================================================================== 78 -->
-
-
-
- <div class="section"><h2>Announcements<a name="Announcements"></a></h2>
- <p class="right">
- Skip to:
- <a href="announce-2011.html">Announcements - 2011</a>
- </p>
-
- <div class="section"><div class="section"><h4 id="a20121222">22 December 2012 - Struts 2.3.8 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.8 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- It's a mostly maintenance release which improves overall performance which should be significant
- better than in version 2.3.7 and slightly better than in version 2.3.4.1. This version depends on new OGNL
- version 3.0.6 - thanks to Pelladi Gabor and Johno Crawford for their contribution!
- Please check the Version Notes to see more details.
- </p>
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.8.
- </p>
- <p>
- Struts 2.3.8 is available in a full distribution or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts238">releases page</a>.
- The release is also available through the central Maven repository under Group ID "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-238.html">release notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20121119">19 November 2012 - Struts 2.3.7 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.7 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- It's a mostly maintenance release where many bugs were solved and many improvements were added.
- Please check the Version Notes to see more details, also performance was improved.
- </p>
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.7.
- </p>
- <p>
- Struts 2.3.7 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts237">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-237.html">release notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20120813">13 August 2012 - Struts 2.3.4.1 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.4.1 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- Two security issues were solved with this release:
- </p><ul>
- <li>
- Decoupling of session attribute and parameter naming for Struts 2 token mechanism,
- to improve security when used for CSRF-attack protection
- </li>
- <li>
- Parameter name length is now by default restricted to 100 characters to diminish possible DOS
- attack effectiveness
- </li>
- </ul>
-
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.4.1.
- </p>
- <p>
- Struts 2.3.4.1 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts2341">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-2341.html">release notes</a>
- and the
- <a class="externalLink" href="https://cwiki.apache.org/confluence/display/WW/S2-010">token mechanism security bulletin</a>
- as well as the
- <a class="externalLink" href="https://cwiki.apache.org/confluence/display/WW/S2-011">parameter name length security bulletin</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20120511">12 May 2012 - Struts 2.3.4 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.4 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- It's a mostly maintenance release where many bugs were solved and many improvements were added.
- Please check the Version Notes to see more details.
- </p>
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.4.
- </p>
- <p>
- Struts 2.3.4 is available in a full distribution, or as separate library, source,
- example and documentation distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts234">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-234.html">version notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20120416">16 April 2012 - Struts 2.3.3 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.3 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- It's a mostly maintenance release where many bugs were solved and many improvements were added.
- Please check the Version Notes to see more details.
- </p>
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.3.
- </p>
- <p>
- Struts 2.3.3 is available in a full distribution, or as separate library, source,
- example and documentation distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts233">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-233.html">version notes</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
-
- </div><div class="section"><h4 id="a20120122">22 January 2012 - Struts 2.3.1.2 General Availability Release</h4>
- <p>
- The Apache Struts group is pleased to announce that Struts 2.3.1.2 is
- available as a "General Availability" release. The GA designation is our
- highest quality grade.
- </p>
- <p>
- Apache Struts 2 is an elegant, extensible framework for creating
- enterprise-ready Java web applications. The framework is designed to
- streamline the full development cycle, from building, to deploying, to
- maintaining applications over time.
- </p>
- <p>
- An important vulnerability were solved with this release:
- </p><ul>
- <li>
- ParameterInterceptor vulnerability allowed remote command execution
- </li>
- <li>
- Default acceptedParamNames has been updated to more restrictive values
- </li>
- </ul>
-
- <p>
- All developers are strongly advised to update existing Struts 2 applications
- to Struts 2.3.1.2.
- </p>
- <p>
- Struts 2.3.1.2 is available in a full distribution,
- or as separate library, source, example and documentation
- distributions, from the
- <a class="externalLink" href="http://struts.apache.org/download.cgi#struts2312">releases page</a>.
- The release is also available through the central Maven repository under Group ID
- "org.apache.struts". The
- <a class="externalLink" href="http://struts.apache.org/2.x/docs/version-notes-2312.html">release notes</a>
- and the
- <a class="externalLink" href="https://cwiki.apache.org/confluence/display/WW/S2-009">security bulletin</a>
- are available online.
- </p>
- <p>
- The 2.3.x series of the Apache Struts framework has a minimum
- requirement of the following specification versions: Servlet API 2.4,
- JSP API 2.0, and Java 5.
- </p>
- <p>
- Should any issues arise with your use of any version of the Struts
- framework, please post your comments to the user list, and, if
- appropriate, file a tracking ticket.
- </p>
- </div></div></div>
- <div class="section"><h2><a name="null"></a></h2>
- <p class="right">
- Skip to:
- <a href="announce-2011.html">Announcements - 2011</a>
- </p>
-
- <p class="right">
- <b>Next:</b>
- <a href="kickstart.html">Kickstart FAQ</a>
- </p>
- </div>
-
-
-
- </div>
- </div>
-
- <hr/>
-
- <footer>
- <div class="container">
- <div class="row span12">Copyright © 2000-2014
- <a href="http://www.apache.org/">The Apache Software Foundation</a>.
- All Rights Reserved.
-
- </div>
+<article class="container">
+ <section class="col-md-12">
+ <h1>Announcements - 2012</h1>
+
+<p class="pull-right">
+ Skip to:
+ <a href="announce-2011.html">Announcements - 2011</a>
+</p>
+
+<h4 id="a20121222">22 December 2012 - Struts 2.3.8 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.8 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ It's a mostly maintenance release which improves overall performance which should be significant
+ better than in version 2.3.7 and slightly better than in version 2.3.4.1. This version depends on new OGNL
+ version 3.0.6 - thanks to Pelladi Gabor and Johno Crawford for their contribution!
+ Please check the Version Notes to see more details.
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.8.
+</p>
+<p>
+ Struts 2.3.8 is available in a full distribution or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts238">releases page</a>.
+ The release is also available through the central Maven repository under Group ID "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-238.html">release notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20121119">19 November 2012 - Struts 2.3.7 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.7 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ It's a mostly maintenance release where many bugs were solved and many improvements were added.
+ Please check the Version Notes to see more details, also performance was improved.
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.7.
+</p>
+<p>
+ Struts 2.3.7 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts237">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-237.html">release notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20120813">13 August 2012 - Struts 2.3.4.1 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.4.1 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ Two security issues were solved with this release:
+<ul>
+ <li>
+ Decoupling of session attribute and parameter naming for Struts 2 token mechanism,
+ to improve security when used for CSRF-attack protection
+ </li>
+ <li>
+ Parameter name length is now by default restricted to 100 characters to diminish possible DOS
+ attack effectiveness
+ </li>
+</ul>
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.4.1.
+</p>
+<p>
+ Struts 2.3.4.1 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts2341">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-2341.html">release notes</a>
+ and the
+ <a href="https://cwiki.apache.org/confluence/display/WW/S2-010">token mechanism security bulletin</a>
+ as well as the
+ <a href="https://cwiki.apache.org/confluence/display/WW/S2-011">parameter name length security bulletin</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20120511">12 May 2012 - Struts 2.3.4 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.4 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ It's a mostly maintenance release where many bugs were solved and many improvements were added.
+ Please check the Version Notes to see more details.
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.4.
+</p>
+<p>
+ Struts 2.3.4 is available in a full distribution, or as separate library, source,
+ example and documentation distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts234">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-234.html">version notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20120416">16 April 2012 - Struts 2.3.3 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.3 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ It's a mostly maintenance release where many bugs were solved and many improvements were added.
+ Please check the Version Notes to see more details.
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.3.
+</p>
+<p>
+ Struts 2.3.3 is available in a full distribution, or as separate library, source,
+ example and documentation distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts233">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-233.html">version notes</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<h4 id="a20120122">22 January 2012 - Struts 2.3.1.2 General Availability Release</h4>
+<p>
+ The Apache Struts group is pleased to announce that Struts 2.3.1.2 is
+ available as a "General Availability" release. The GA designation is our
+ highest quality grade.
+</p>
+<p>
+ Apache Struts 2 is an elegant, extensible framework for creating
+ enterprise-ready Java web applications. The framework is designed to
+ streamline the full development cycle, from building, to deploying, to
+ maintaining applications over time.
+</p>
+<p>
+ An important vulnerability were solved with this release:
+<ul>
+ <li>
+ ParameterInterceptor vulnerability allowed remote command execution
+ </li>
+ <li>
+ Default acceptedParamNames has been updated to more restrictive values
+ </li>
+</ul>
+</p>
+<p>
+ All developers are strongly advised to update existing Struts 2 applications
+ to Struts 2.3.1.2.
+</p>
+<p>
+ Struts 2.3.1.2 is available in a full distribution,
+ or as separate library, source, example and documentation
+ distributions, from the
+ <a href="http://struts.apache.org/download.cgi#struts2312">releases page</a>.
+ The release is also available through the central Maven repository under Group ID
+ "org.apache.struts". The
+ <a href="http://struts.apache.org/2.x/docs/version-notes-2312.html">release notes</a>
+ and the
+ <a href="https://cwiki.apache.org/confluence/display/WW/S2-009">security bulletin</a>
+ are available online.
+</p>
+<p>
+ The 2.3.x series of the Apache Struts framework has a minimum
+ requirement of the following specification versions: Servlet API 2.4,
+ JSP API 2.0, and Java 5.
+</p>
+<p>
+ Should any issues arise with your use of any version of the Struts
+ framework, please post your comments to the user list, and, if
+ appropriate, file a tracking ticket.
+</p>
+
+<p class="pull-right">
+ Skip to: <a href="announce-2011.html">Announcements - 2011</a>
+</p>
+
+<p class="pull-left">
+ <strong>Next:</strong>
+ <a href="kickstart.html">Kickstart FAQ</a>
+</p>
+
+ </section>
+</article>
+
+ <hr/>
+<footer class="container">
+ <div class="row col-md-12 text-center">
+ Copyright © 2000-2014 <a href="http://www.apache.org/">The Apache Software Foundation</a>. All Rights Reserved.
+ </div>
+ <div class="row col-md-12 text-center">
+ Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts
+ project logos are trademarks of The Apache Software Foundation.
+ </div>
+</footer>
- <?xml version="1.0" encoding="UTF-8"?>
-<div class="row span12">Apache Struts, Struts, Apache, the Apache feather logo, and the Apache Struts
- project logos are trademarks of The Apache Software Foundation.</div>
-
- <p id="poweredBy" class="pull-right">
- <a href="http://maven.apache.org/" title="Built by Maven" class="poweredBy">
- <img class="builtBy" alt="Built by Maven" src="./images/logos/maven-feather.png" />
- </a>
- </p>
-
- </div>
- </footer>
- </body>
+
+</body>
</html>