What's Changed
- Updates OWASP suppressions as some reports are false positive by @lukaszlenart in #637
- Defines to autolink PRs to issues in ASF JIRA by @lukaszlenart in #638
- [WW-5263] Uses proper names for CSP, COOP and COEP interceptors by @lukaszlenart in #639
- [WW-5262] Extracts excluded classes and beans into dedicated XML config files by @lukaszlenart in #640
- WW-5199 Allow forwarding from/to actions by @kusalk in #642
- [WW-5264] Moves XSLT result into a dedicated plugin by @lukaszlenart in #641
- Applies permission to GH workflows by @lukaszlenart in #643
- [WW-5264] Removes XSLTResult from struts-default.xml as it was moved in to plugin by @lukaszlenart in #646
- WW-5265 Allow removal of a single/specific container provider by @kusalk in #645
- [WW-5269] Upgrades Jackson to version 2.14.1 by @lukaszlenart in #647
- [WW-5272] Extends <s:date/> to support java.sql.Time by @lukaszlenart in #649
- [WW-5277] Upgrades Freemarker to version 2.3.32 by @lukaszlenart in #651
- [WW-5274] Marks the Pell multipart plugin as deprecated by @lukaszlenart in #653
- [WW-5276] Cleans up also wrapper request to avoid resource leak and potential DoS attack by @lukaszlenart in #654
- [WW-4404] Http interceptor by @lukaszlenart in #655
- WW-5270 Fix forwarding from Struts excluded URL by @kusalk in #648
- WW-5278 Collect duplicated code into AbstractActionValidatorManager by @kusalk in #656
- WW-5279 Improve readability of XmlConfigurationProvider class by @kusalk in #657
- [WW-5275] Allows to provide a custom CspSettings per action by @lukaszlenart in #658
- WW-5284 Refactor ActionValidatorManager implementations by @kusalk in #659
- WW-5268 Ability to exempt classes from package exclusions by @kusalk in #660
- [WW-5285] Limits max number of files to upload at once by @lukaszlenart in #662
- WW-5290 Refactor ConfigurationManager by @kusalk in #666
- WW-5292 Allow overriding of Operations classes in two filter setup and assorted clean up by @kusalk in #667
- WW-5266 Implement struts.multipart.maxFileSize by @kusalk in #665
- WW-5196 use generics for RequestMap and ApplicationMap and correct SessionMap to also be of type <String, Object> by @sdutry in #585
- WW-5243 remove deprecated action prefix cross namespaces by @sdutry in #669
- WW-5253 Remove deprecated methods from DefaultUrlHelper by @sdutry in #671
- WW-5251 remove deprecated interfaces related to ServletConfigInterceptor by @sdutry in #670
- WW-5288 Make excluded package exemption logic more strict by @kusalk in #664
- WW-5293 Allow loading XML configuration from other than filesystem by @kusalk in #668
- Bump spring-core from 5.3.23 to 5.3.26 by @dependabot in #672
- [WW-5289] Fixes creating executor to avoid locking JVM on shutdown by @lukaszlenart in #673
- [WW-5295] Adds support for java.time.LocalTime to <s:date/> tag by @lukaszlenart in #677
- WW-5298 Clean up StrutsVelocityContext by @kusalk in #674
- WW-5299 Clean up ActionChainResult by @kusalk in #675
- WW-5300 Make Dispatcher methods overridable by @kusalk in #676
- WW-5308 Java templates plugin, add minlength and maxlength to textarea. by @gregh3269 in #683
- [WW-5280] Cleans up NoParameters interfaces by @lukaszlenart in #679
- [WW-5304] Drops deprecated methods and fields in ActionContext by @lukaszlenart in #680
- Improve [WW-4434] - add documentation and rename existing ftl to achieve the wanted behaviour by @fischey in #682
- Bump testng from 7.5 to 7.5.1 by @dependabot in #684
- [WW-5302] Evaluates the name attribute before assigning it to the id attribute by @lukaszlenart in #678
- Bump spring-core from 5.3.26 to 5.3.27 by @dependabot in #681
- [WW-5296] Uses proper DTDs by @lukaszlenart in #685
- [WW-5309] Supports patterns starting with variable by @lukaszlenart in #686
- WW-5301 Fix custom VelocityManager bean selection by @kusalk in #687
- [WW-5312] Attempt to fix ExecuteAndWaitInterceptor inconsistent processing by @JCgH4164838Gh792C124B5 in #688
- [WW-5310] Properly parses param value with equal sign by @lukaszlenart in #689
- WW-5288 follow-up test case updates by @JCgH4164838Gh792C124B5 in #690
- [WW-5261] Avoids creating ValueStack if no ActionContext is available by @lukaszlenart in #691
- WW-5314 Do not log warnings for bad user input from JakartaMultiPartRequest by @kusalk in #693
- [WW-5310] Supports fragment in URL by @lukaszlenart in #692
New Contributors
Full Changelog: STRUTS_6_1_1...STRUTS_6_2_0