Passes all my test with my 2.5.x code base. (although 2.3.x does not like the strict-method-invocation, global-allowed-methods and allowed-methods attributes which I must comment out from my struts.xml for it to work)
[ ] Leave at test build [ ] Alpha [ ] Beta [x] General Availability (GA) +1 (b) On 12 July 2016 at 06:37, Lukasz Lenart <lukaszlen...@apache.org> wrote: > The Apache Struts 2.3.30 test build is now available. With this release: > > [WW-4641] - CVE-2016-0785 > [WW-4642] - Unable to retrieve s:hidden field values > [WW-4645] - SecurityMemberAccess exclude class design issue > [WW-4651] - Negative number is considered an arithmetic expression > [WW-4648] - Upgrade commons-fileupload to the latest version > > also this version uses the latest OGNL 3.0.x series which doesn't > allow modify `_memeberAccess` via a key plus doesn't treat negative > numbers as an expression > https://github.com/jkuhnert/ognl#release-notes---version-3110-3019 > > Release notes > * https://cwiki.apache.org/confluence/display/WW/Version+Notes+2.3.30 > > Distribution: > * https://dist.apache.org/repos/dist/dev/struts/2.3.30/ > > Maven 2 staging repository: > * https://repository.apache.org/content/repositories/staging/ > > Once you have had a chance to review the test build, please respond > with a vote on its quality: > > [ ] Leave at test build > [ ] Alpha > [ ] Beta > [ ] General Availability (GA) > > Everyone who has tested the build is invited to vote. Votes by PMC > members are considered binding. A vote passes if there are at least > three binding +1s and more +1s than -1s. > > The vote will remain open for at least 72 hours, longer upon request. > A vote can be amended at any time to upgrade or downgrade the quality > of the release based on future experience. If an initial vote > designates the build as "Beta", the release will be submitted for > mirroring and announced to the user list. Once released as a public > beta, subsequent quality votes on a build may be held on the user > list. > > As always, the act of voting carries certain obligations. A binding > vote not only states an opinion, but means that the voter is agreeing > to help do the work. > > > Kind regards > -- > Ćukasz > + 48 606 323 122 http://www.lenart.org.pl/ > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org > For additional commands, e-mail: dev-h...@struts.apache.org > >