Merged security fix from version 2.3.15.1, 2.3.15.2 and 2.3.15.3
Defined new factory interfaces to simplify extending ObjectFactory, see WW-4158
New interface ParamNameAwareResult was defined, see WW-4144
Solved problem with global "error" result in the Convention Plugin, see WW-4100
RolesInterceptor was extended to allow check defined roles and also precedent was changed that disallowedRoles are examined in the first place, see WW-4118
New parameter was added to
During devMode user can explicit disable XML reloading, I18N reloading and any other, see devMode page
The action: and method: prefixes are be by default excluded and changed order to first check excludeParams and then acceptedParams in ParametersInterceptor, see WW-4023
Restored previous behaviour where both ParamatersInterceptor AND ParameterNameAware must accept parameter - there is no more precedence
Added proper support for multiple ActionMapper's used with PrefixBasedActionMapper, see PrefixBasedActionMapper and WW-4131
New DeprecationInterceptor was added, to warn users about unknown/deprecated options, see WW-4232
New PostbackResult was defined, see WW-4229
Improved extending theme mechanism to allow override single template in parent theme, see WW-4145 and Extending Themes
Solved problem with creating empty map entries via Ognl, see WW-3603
and other small improvements
项目主页：https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12324546&projectId=12311041
下载地址：http://struts.apache.org/download.cgi#struts2312
来自:开源中国社区