Home > Guides > Migration Guide > Version Notes 2.2.3 |

Apache Struts 2 Documentation
Version Notes 2.2.3
Edit Page Browse Space Add Page Add News

These are the notes for the Struts 2.2.3 distribution.

For prior notes in this release series, see Version Notes 2.2.1.1

- If you are a Maven user, you might want to get started using the Maven Archetype.
- Another quick-start entry point is the blank application. Rename and deploy the WAR as a starting point for your own development.

Maven Dependency

    <dependency>
      <groupId>org.apache.struts</groupId>
      <artifactId>struts2-core</artifactId>
      <version>2.2.3</version>
    </dependency>

You can also use Struts Archetype Catalog like below

Struts Archetype Catalog

    mvn archetype:generate -DarchetypeCatalog=http://struts.apache.org/2.2.3/

Staging Repository

    <repositories>
      <repository>
        <id>apache.nexus</id>
        <name>ASF Nexus Staging</name>
        <url>https://repository.apache.org/content/groups/staging/</url>
      </repository>
    </repositories>

## Internal Changes

- Two important vulnerability were solved with this release:
  - XSS vulnerability in javatemplates plugin
  - Struts 2 <s:submit> XSS vulnerability
- OGNL was upgraded to version 3.0.1 which includes Javassist library, so you don't have to specify it as a separated dependency in your project
- Shade of Commons library using maven-shade-plugin was removed from Struts 2 Core and other modules
- The whole project was adjusted to Maven 3 requirements
- Add ability to control devMode per request
- Many fixes and extensions to JSON plugin and REST plugin

### Issue Detail

- JIRA Release Notes 2.2.3

### Issue List

- Struts 2.2.3 DONE
- Struts 2.3 TODO

### Other resources

- Commit Logs (Struts 1 and Struts 2)
- Source Code Repository (includes change browsing)