Apache Struts

Software Screenshot:
Apache Struts
Software Details:
Version: 2.3.24 / 2.5-BETA1 updated
Upload Date: 1 Oct 15
Distribution Type: Freeware
Downloads: 134

Rating: nan/5 (Total Votes: 0)

Apache Struts is a mature and battle-tested Java framework for building complex and modern Java Web applications.

These applications use a modern MVC design architecture and can easily be extended via plugins,

Support is included for modern-day technologies like AJAX, JSON, REST, and SOAP, all bundled into one powerful core that has been used by many developers and big-name companies around the Internet.

Struts is very well-documented and also benefits from a broad range of plugins contributed by a dedicated community, for both its 2.x and 1.x branches. While the 1.x branch was a success when it came out and become one of the most used Java frameworks around, it is now deprecated and unsupported.

Struts 2 was originally known as WebWork 2. After working independently for several years, the WebWork and Struts communities joined forces to launch the 2.x branch of Struts.

What is new in this release:

  • Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
  • Extended existing security mechanism to block access to given Java packages and Classes
  • Collection Parameters for RedirectResult
  • Make ParametersInterceptor supports chinese in hash key by default
  • themes.properties can be loaded using ServletContext allows to put template folder under WEB-INF or on classpath
  • New tag datetextfield
  • Only valid Ognl expressions are cached
  • Custom TextProvider can be used for validation errors of model driven actions
  • datetimepicker's label fixed
  • PropertiesJudge removed and properties are checked in SecurityMemberAccess
  • resource reloading works in IBM JVM
  • Default reloading settings were removed from default.properties

What is new in version 2.3.24:

  • Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
  • Extended existing security mechanism to block access to given Java packages and Classes
  • Collection Parameters for RedirectResult
  • Make ParametersInterceptor supports chinese in hash key by default
  • themes.properties can be loaded using ServletContext allows to put template folder under WEB-INF or on classpath
  • New tag datetextfield
  • Only valid Ognl expressions are cached
  • Custom TextProvider can be used for validation errors of model driven actions
  • datetimepicker's label fixed
  • PropertiesJudge removed and properties are checked in SecurityMemberAccess
  • resource reloading works in IBM JVM
  • Default reloading settings were removed from default.properties

What is new in version 2.3.20.1:

  • Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
  • Extended existing security mechanism to block access to given Java packages and Classes
  • Collection Parameters for RedirectResult
  • Make ParametersInterceptor supports chinese in hash key by default
  • themes.properties can be loaded using ServletContext allows to put template folder under WEB-INF or on classpath
  • New tag datetextfield
  • Only valid Ognl expressions are cached
  • Custom TextProvider can be used for validation errors of model driven actions
  • datetimepicker's label fixed
  • PropertiesJudge removed and properties are checked in SecurityMemberAccess
  • resource reloading works in IBM JVM
  • Default reloading settings were removed from default.properties

What is new in version 2.3.20:

  • Merged security fixes from version 2.3.16.1, 2.3.16.2, 2.3.16.3
  • Extended existing security mechanism to block access to given Java packages and Classes
  • Collection Parameters for RedirectResult
  • Make ParametersInterceptor supports chinese in hash key by default
  • themes.properties can be loaded using ServletContext allows to put template folder under WEB-INF or on classpath
  • New tag datetextfield
  • Only valid Ognl expressions are cached
  • Custom TextProvider can be used for validation errors of model driven actions
  • datetimepicker's label fixed
  • PropertiesJudge removed and properties are checked in SecurityMemberAccess
  • resource reloading works in IBM JVM
  • Default reloading settings were removed from default.properties

What is new in version 2.3.16.3:

  • Extends excluded params in CookieInterceptor to avoid manipulation of Struts' internals.

What is new in version 2.3.15.3:

  • Broken access control issue fixed.

What is new in version 2.3.15.1:

  • Remote code execution vulnerability when using short-circuit navigation parameter prefixes.
  • Open redirect vulnerability when using short-circuit redirect parameter prefixes.

What is new in version 2.3.1.2:

  • Default acceptedParamNames were further updated to more restrictive values to solve security vulnerabilities in ParameterInterceptor.

What is new in version 2.1.8.1:

  • Updated assembly building process to create Windows-friendly filenames and to retrieve all documentation.

Requirements:

  • Java 5 or higher

Similar Software

Catalyst
Catalyst

10 Dec 15

Horus Plus
Horus Plus

12 Apr 15

Geddy
Geddy

9 Apr 16

Katana
Katana

14 Apr 15

Other Software of Developer Apache Software Foundation

Comments to Apache Struts

Comments not found
Add Comment
Turn on images!