📄 release-notes.html
字号:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
<title>Struts Release Notes (since 1.2.8)</title>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
<link href="../struts.css" type="text/css" rel="stylesheet" />
</head>
<body>
<div id="heading">
<a href="http://apache.org/">
<img id="asf_logo_wide" alt="The Apache Project" src="../images/asf_logo_wide.gif" />
</a>
<a href="http://struts.apache.org/">
<img id="struts-logo" alt="Struts Framework" src="../images/struts.gif" />
</a>
</div>
<!--end heading-->
<div id="content">
<div id="menu">
<p>User Guide</p>
<ul>
<li>
<a href="index.html">Table of Contents</a>
</li>
<li>
<a href="preface.html">Preface</a>
</li>
<li>
<a href="introduction.html">Introduction</a>
</li>
<li>
<a href="building_model.html">Model Components</a>
</li>
<li>
<a href="building_view.html">View Components</a>
</li>
<li>
<a href="building_controller.html">Controller Components</a>
</li>
<li>
<a href="configuration.html">Configuration</a>
</li>
<li>
<a href="release-notes.html">Release Notes</a>
</li>
<li>
<a href="installation.html">Installation</a>
</li>
</ul>
<p>Developer Guides</p>
<ul>
<li>
<a href="dev_bean.html">Bean Tags</a>
</li>
<li>
<a href="dev_html.html">HTML Tags</a>
</li>
<li>
<a href="dev_logic.html">Logic Tags</a>
</li>
<li>
<a href="dev_nested.html">Nested Tags</a>
</li>
<li>
<a href="dev_tiles.html">Tiles Tags</a>
</li>
<li>
<a href="dev_util.html">Utilities</a>
</li>
<li>
<a href="dev_validator.html">Validator</a>
</li>
</ul>
<p>Quick Links</p>
<ul>
<li>
<a href="../index.html">Welcome</a>
</li>
<li>
<a href="index.html">User and Developer Guides *</a>
</li>
<li>
<a href="../faqs/index.html">FAQs and HowTos</a>
</li>
</ul>
</div>
<!--end menu-->
<div id="main">
<h1 id="release_notes">6.1 Release Notes - Version 1.2.9</h1>
<h2 id="Introduction">Introduction</h2>
<div class="indent">
<p>
The main motivation for releasing Struts 1.2.9 is to fix three
security issues which have been identified:
</p>
<ul>
<li>
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38374">Bug 38374</a> -
Validation always skipped with Globals.CANCEL_KEY.</li>
<li>
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38534">Bug 38534</a> -
DOS attack, application hack.</li>
<li>
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38749">Bug 38749</a> -
XSS vulnerability in LookupDispatchAction.</li>
</ul>
<p>
This section contains release notes for changes that have taken
place since
<a href="release-notes-1.2.8.html">Version 1.2.8</a>.
To keep up-to-date on all changes to Struts, subscribe to the
dev@ list.
</p>
<p>
<b>Notes on upgrading</b> are maintained in the
<a href="http://wiki.apache.org/struts/StrutsUpgrade">Wiki Upgrade pages</a>.
The wiki is a community maintained resource - please feel free to add your
input so that everyone can benefit from the collective experience.
</p>
<p>
For the version requirements of each library, see the
<a href="installation.html">Installation chapter</a>.
</p>
<h3 id="STRUTS_1_2_9">Version 1.2.9</h3>
<p>
After <a href="http://svn.apache.org/viewcvs.cgi/struts/core/tags/STRUTS_1_2_6/">Version 1.2.6 was tagged</a>
the <a href="http://svn.apache.org/viewcvs.cgi/struts/core/branches/STRUTS_1_2_BRANCH/">1.2 Branch</a>
was created and work started on the next version (<i>1.3.x series</i>). Work has continued on
both versions and <i>Revision</i> numbers shown in brackets are where a change has been ported
from the current development version into the <i>1.2 Branch</i>.
</p>
<table>
<thead>
<tr>
<th>Modification</th>
<th>Revision</th>
<th>Bugzilla</th>
<th>Description</th>
</tr>
</thead>
<tr>
<td align="center">2006-03-08</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=384234&view=rev">384234</a>
(<a href="http://svn.apache.org/viewcvs?rev=384235&view=rev">384235</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=37817">37817</a>
</td>
<td>TagUtils doesn't create XHTML compliant URLs using forwards defined with redirect="true".</td>
</tr>
<tr>
<td align="center">2006-03-08</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=384090&view=rev">384090</a>
(<a href="http://svn.apache.org/viewcvs?rev=384092&view=rev">384092</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38343">38343</a>
</td>
<td>Add EventDispatchAction and EventActionDispatcher.</td>
</tr>
<tr>
<td align="center">2006-03-07</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=383907&view=rev">383907</a>
(<a href="http://svn.apache.org/viewcvs?rev=383908&view=rev">383908</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=37685">37685</a>
</td>
<td>Javascript tag does not work on Mozilla.</td>
</tr>
<tr>
<td align="center">2006-03-07</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=383718&view=rev">383718</a>
(<a href="http://svn.apache.org/viewcvs?rev=383720&view=rev">383720</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38749">38749</a>
</td>
<td>XSS vulnerability in LookupDispatchAction.</td>
</tr>
<tr>
<td align="center">2006-02-15</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=379661&view=rev">379661</a>
(<a href="http://svn.apache.org/viewcvs?rev=377929&view=rev">377929</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38534">38534</a>
</td>
<td>DOS attack, application hack.</td>
</tr>
<tr>
<td align="center">2006-02-14</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=377562&view=rev">377562</a>
(<a href="http://svn.apache.org/viewcvs?rev=377805&view=rev">377805</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38374">38374</a>
</td>
<td>Validation always skipped with Globals.CANCEL_KEY.</td>
</tr>
<tr>
<td align="center">2006-01-31</td>
<td align="center">
<a href="http://svn.apache.org/viewcvs.cgi?rev=373798&view=rev">373798</a>
(<a href="http://svn.apache.org/viewcvs?rev=373801&view=rev">373801</a>)</td>
<td align="center">
<a href="http://issues.apache.org/bugzilla/show_bug.cgi?id=38461">38461</a>
</td>
<td>struts-el html tag library errorKey not using documented default value.</td>
</tr>
</table>
</div>
<hr class="section" />
<div class="indent">
<p class="right">Next:
<a href="installation.html">Installation</a>
</p>
</div>
</div>
<!--end main-->
</div>
<!--end content-->
<div id="footer">
<img id="powered-logo" alt="Powered by Struts" src="../images/struts-power.gif" />
Copyright (c) 2000-2005, The Apache Software Foundation <span class="noprint">-
<a href="http://wiki.apache.org/struts/StrutsDocComments">Comments?</a>
</span>
</div>
<!--end footer-->
</body>
</html>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -