0db282a51a
pom(version): sets proper SNAPSHOT version ( #1709 )
2026-05-25 15:04:31 +00:00
ca1b22d9be
Struts 6.9.0 ( #1662 )
...
* [maven-release-plugin] prepare release STRUTS_6_9_0
* [maven-release-plugin] prepare for next development iteration
2026-05-01 10:41:26 +02:00
b936fcbf8b
WW-5621 Harden XML parsers against Entity Expansion (Billion Laughs) attacks ( #1643 )
...
Backport of apache/struts#1642 from Struts 7 to Struts 6.
Modern JDKs (7u45+) already protect against this attack with a built-in
64K entity expansion limit. These changes add defense-in-depth hardening
and remove unnecessary attack surface.
- Enable FEATURE_SECURE_PROCESSING in DomHelper SAX parser
- Enable FEATURE_SECURE_PROCESSING in DigesterDefinitionsReader
- Remove unused parseStringAsXML feature from StringAdapter to eliminate
a theoretical XML Entity Expansion vector
- Deprecate setParseStringAsXML() and getParseStringAsXML() for removal
- Add Billion Laughs protection tests for DomHelper and DigesterDefinitionsReader
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-04 11:20:47 +02:00
edd604a9c5
Sets a proper SNAPSHOT version before next release ( #1615 )
2026-03-09 10:24:37 +01:00
34e279e6d7
[maven-release-plugin] prepare for next development iteration
2025-09-15 07:46:27 +02:00
80225c7169
[maven-release-plugin] prepare release STRUTS_6_8_0
2025-09-15 07:46:18 +02:00
ca4e07cead
[maven-release-plugin] prepare for next development iteration
2025-02-20 13:20:56 +01:00
8fb9aba74b
[maven-release-plugin] prepare release STRUTS_6_7_4
2025-02-20 13:20:46 +01:00
87e322dbe2
[maven-release-plugin] prepare for next development iteration
2025-02-17 11:34:19 +01:00
7909f43237
[maven-release-plugin] prepare release STRUTS_6_7_3
2025-02-17 11:34:11 +01:00
7a77c7a82c
[maven-release-plugin] prepare for next development iteration
2025-02-04 07:39:44 +01:00
5038a9209f
[maven-release-plugin] prepare release STRUTS_6_7_2
2025-02-04 07:39:35 +01:00
07603b9591
[maven-release-plugin] prepare for next development iteration
2025-02-02 10:16:30 +01:00
3227d5929a
[maven-release-plugin] prepare release STRUTS_6_7_1
2025-02-02 10:16:20 +01:00
6de93e77db
Defines proper snapshot version
2025-01-24 07:58:39 +01:00
60a3db0a63
Sets version to 6.7.1-SNAPSHOT to prepare for another development cycle
2024-12-18 14:43:29 +01:00
1f5305c249
[maven-release-plugin] prepare release STRUTS_6_7_0
2024-11-17 10:57:09 +01:00
d33be1d43c
[maven-release-plugin] prepare for next development iteration
2024-10-05 16:08:38 +02:00
c812450292
[maven-release-plugin] prepare release STRUTS_6_6_1
2024-10-05 16:08:26 +02:00
f977f0c0e5
[maven-release-plugin] prepare for next development iteration
2024-07-20 08:28:46 +02:00
d6e30b45da
[maven-release-plugin] prepare release STRUTS_6_6_0
2024-07-20 08:28:35 +02:00
54e387dc6f
[maven-release-plugin] prepare for next development iteration
2024-07-12 07:27:19 +02:00
dbfb59cb7c
[maven-release-plugin] prepare release STRUTS_6_5_0
2024-07-12 07:27:08 +02:00
c6d13f1016
[maven-release-plugin] prepare for next development iteration
2024-04-07 11:22:16 +02:00
9c5c80d173
[maven-release-plugin] prepare release STRUTS_6_4_0
2024-04-07 11:22:06 +02:00
a6d6d918fa
Reverts release and fixes issue with assembly
2024-04-07 11:14:44 +02:00
5e8b81b382
[maven-release-plugin] prepare for next development iteration
2024-04-07 08:13:17 +02:00
f8381fbdbf
[maven-release-plugin] prepare release STRUTS_6_4_0
2024-04-07 08:13:07 +02:00
b7f73715d9
[maven-release-plugin] prepare for next development iteration
2023-09-11 09:49:51 +02:00
236ae15c66
[maven-release-plugin] prepare release STRUTS_6_3_0_1
2023-09-11 09:49:42 +02:00
f4253ff8ff
[maven-release-plugin] prepare for next development iteration
2023-09-11 09:22:20 +02:00
0ba2d69af9
[maven-release-plugin] prepare release STRUTS_6_3_0_1
2023-09-11 09:22:12 +02:00
a0185f2483
[maven-release-plugin] prepare for next development iteration
2023-09-01 08:01:39 +02:00
1a88f78a7e
[maven-release-plugin] prepare release STRUTS_6_3_0
2023-09-01 08:01:30 +02:00
20e2110614
Reverts version to 6.3.0-SNAPSHOT
2023-09-01 07:44:47 +02:00
32e42b3ecd
[maven-release-plugin] prepare for next development iteration
2023-08-23 07:30:16 +02:00
04e9246389
[maven-release-plugin] prepare release STRUTS_6_3_0
2023-08-23 07:30:08 +02:00
05cfe51d5f
WW-5334 Extract javax.servlet-api into parent POM
2023-08-18 22:17:11 +10:00
c452137005
WW-5334 Correct struts2-xslt-plugin pom
2023-08-18 21:43:49 +10:00
62b41ef466
[maven-release-plugin] prepare for next development iteration
2023-06-28 09:13:16 +02:00
bb7cce26e9
[maven-release-plugin] prepare release STRUTS_6_2_0
2023-06-28 09:13:07 +02:00
15dd2f2234
WW-5264 Moves XSLT result into a dedicated plugin
2022-12-09 09:45:29 +01:00
Lukasz Lenart