Differences between revisions 2 and 3
Revision 2 as of 2005-11-30 14:57:51
Size: 1496
Comment:
Revision 3 as of 2009-09-20 23:12:35
Size: 1510
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 9: Line 9:
Struts 1.2.8 is distributed with [http://jakarta.apache.org/commons/validator/ Commons Validator] 1.1.4. However you may wish to upgrade to [http://wiki.apache.org/jakarta-commons/ValidatorVersion120 Commons Validator 1.2.0] which was recently released either because of the ''XHTML & !JavaScript Validation Issue'' or because of the ''Validator 1.2.0 Features''... Struts 1.2.8 is distributed with [[http://jakarta.apache.org/commons/validator/|Commons Validator]] 1.1.4. However you may wish to upgrade to [[http://wiki.apache.org/jakarta-commons/ValidatorVersion120|Commons Validator 1.2.0]] which was recently released either because of the ''XHTML & !JavaScript Validation Issue'' or because of the ''Validator 1.2.0 Features''...
Line 12: Line 12:
The problem of !JavaScript Validation not working in '''''XHTML''''' mode (see [http://issues.apache.org/bugzilla/show_bug.cgi?id=35127 Bug 35127]) can be resolved by upgrading to [http://struts.apache.org/acquiring.html Struts 1.2.8] and [http://jakarta.apache.org/commons/validator/downloads.html Commons Validator 1.2.0]. The problem of !JavaScript Validation not working in '''''XHTML''''' mode (see [[http://issues.apache.org/bugzilla/show_bug.cgi?id=35127|Bug 35127]]) can be resolved by upgrading to [[http://struts.apache.org/acquiring.html|Struts 1.2.8]] and [[http://jakarta.apache.org/commons/validator/downloads.html|Commons Validator 1.2.0]].
Line 17: Line 17:
   * [http://jakarta.apache.org/commons/validator/changes-report.html Changes Report] - for a full list of changes in Validator 1.2.0
   * [http://wiki.apache.org/jakarta-commons/ValidatorVersion120 Wiki Release Notes] -for a summary of changes in Validator 1.2.0 and notes on upgrading.
   * [[http://jakarta.apache.org/commons/validator/changes-report.html|Changes Report]] - for a full list of changes in Validator 1.2.0
   * [[http://wiki.apache.org/jakarta-commons/ValidatorVersion120|Wiki Release Notes]] -for a summary of changes in Validator 1.2.0 and notes on upgrading.

Upgrading Struts 1.2.7 to Struts 1.2.8

N.B. The primary motivation for Struts 1.2.8 was to fix a Cross Site Scripting (XSS) vulnerability. See StrutsXssVulnerability for more details.


1. jars

Only the struts.jar needs to be upgraded - all Struts dependencies remain the same as Struts 1.2.7.

2. Commons Validator 1.2.0

Struts 1.2.8 is distributed with Commons Validator 1.1.4. However you may wish to upgrade to Commons Validator 1.2.0 which was recently released either because of the XHTML & JavaScript Validation Issue or because of the Validator 1.2.0 Features...

2.1 XHTML & JavaScript Validation Issue

The problem of JavaScript Validation not working in XHTML mode (see Bug 35127) can be resolved by upgrading to Struts 1.2.8 and Commons Validator 1.2.0.

2.2 Validator 1.2.0 Features

For details of Commons Validator 1.2.0 see ...

StrutsUpgradeNotes127to128 (last edited 2009-09-20 23:12:35 by localhost)