-
Terminally Deprecated ElementsElementDescriptionsince 7.3.0, use
StrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.since 7.3.0, useStrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.since 7.3.0, unused - superseded by internal concurrent storage. Retained only for binary compatibility with subclasses compiled against earlier versions, and will be removed in a future release.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function)which stores the built mapping itself.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function)which returns an empty map for classes known to have no mapping.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function), which resolves and caches the mapping in one call instead of requiring a check-then-act at the call site.since 7.3.0, no longer used. The unreachable content-type null-check inacceptFile()that referenced this key was removed as part of the in-memory upload optimization (WW-5413); there is no replacement. This constant will be removed in a future version.Since 7.2.0, useAcceptLanguageLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, useCookieLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, use the top-level handler classes inorg.apache.struts2.interceptor.i18n. Scheduled for removal in the next release cycle.Since 7.2.0, useRequestLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, useSessionLocaleHandler. Scheduled for removal in the next release cycle.Use instance methodJSONUtil.deserializeInput(Reader, int)with injected JSONUtil insteadUse instance methodJSONUtil.deserializeInput(Reader, int)with injected JSONUtil insteadsince 7.3.0, this accessor is no longer used by the framework and will be removed in a future version.since 6.8.0, to be removed, seeReflectionContextFactorysince 7.2.0, scheduled for removal in a future major version. XStream has a long history of deserialization vulnerabilities and requires per-class allowlist maintenance. The defaultxmlbinding instruts-plugin.xmlusesJacksonXmlHandler, which respects@StrutsParameterauthorization via theAuthorizationAwareContentTypeHandlermechanism. Users who have explicitly overridden thexmlhandler toXStreamHandlershould migrate toJacksonXmlHandler.This feature has been removed for security reasons (potential XML Entity Expansion attacks). This method now always returns false and will be removed in a future version.This feature has been removed for security reasons (potential XML Entity Expansion attacks). This method is now a no-op and will be removed in a future version.since 6.8.0, avoid using this interface and any of its implementation, it's going to be removed soon
-
Deprecated InterfacesInterfaceDescriptionsince 6.8.0, avoid using this interface and any of its implementation, it's going to be removed soon
-
Deprecated ClassesClassDescriptionSince 7.2.0, use
AcceptLanguageLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, useCookieLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, use the top-level handler classes inorg.apache.struts2.interceptor.i18n. Scheduled for removal in the next release cycle.Since 7.2.0, useRequestLocaleHandler. Scheduled for removal in the next release cycle.Since 7.2.0, useSessionLocaleHandler. Scheduled for removal in the next release cycle.since 7.3.0, this accessor is no longer used by the framework and will be removed in a future version.since 6.8.0, to be removed, seeReflectionContextFactorysince 7.2.0, scheduled for removal in a future major version. XStream has a long history of deserialization vulnerabilities and requires per-class allowlist maintenance. The defaultxmlbinding instruts-plugin.xmlusesJacksonXmlHandler, which respects@StrutsParameterauthorization via theAuthorizationAwareContentTypeHandlermechanism. Users who have explicitly overridden thexmlhandler toXStreamHandlershould migrate toJacksonXmlHandler.since 7.2, injectProxyServiceinstead. This class will be removed in a future version.
-
Deprecated FieldsFieldDescriptionsince 7.3.0, use
DefaultObjectTypeDeterminer.ELEMENT_PREFIXinstead. TheCollection_xxxkey format has been superseded byElement_xxxsince WebWork 2.1.x. Existing-conversion.propertiesfiles keep working:DefaultObjectTypeDeterminer.getElementClass(Class, String, Object)still falls back to this prefix.since 7.3.0, useDefaultObjectTypeDeterminer.ELEMENT_PREFIXinstead. A second public spelling of the same deprecatedCollection_prefix asDefaultObjectTypeDeterminer.DEPRECATED_ELEMENT_PREFIX, unused by the framework itself.since 7.3.0, unused - superseded by internal concurrent storage. Retained only for binary compatibility with subclasses compiled against earlier versions, and will be removed in a future release.since 7.3.0, no longer used. The unreachable content-type null-check inacceptFile()that referenced this key was removed as part of the in-memory upload optimization (WW-5413); there is no replacement. This constant will be removed in a future version.
-
Deprecated MethodsMethodDescriptionsince 7.3.0, use
StrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.since 7.3.0, useStrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.since 7.3.0, useStrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function)which stores the built mapping itself.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function)which returns an empty map for classes known to have no mapping.since 7.3.0, useTypeConverterHolder.computeMappingIfAbsent(Class, Function), which resolves and caches the mapping in one call instead of requiring a check-then-act at the call site.since 7.2.0. OverrideCookieInterceptor.populateCookieValueIntoStack(String, String, Map, ValueStack, Object)instead so cookie writes are authorized byParameterAuthorizer. The default 5-arg implementation calls this method after the authorization gate, so existing overrides continue to receive only authorized cookies.Use instance methodJSONUtil.deserializeInput(Reader, int)with injected JSONUtil insteadUse instance methodJSONUtil.deserializeInput(Reader, int)with injected JSONUtil insteadThis feature has been removed for security reasons (potential XML Entity Expansion attacks). This method now always returns false and will be removed in a future version.This feature has been removed for security reasons (potential XML Entity Expansion attacks). This method is now a no-op and will be removed in a future version.since 7.1, useProxyService.resolveTargetMember(Member, Class)instead.since 7.2, injectProxyServiceinsteadsince 7.2, injectProxyServiceinsteadsince 7.2, injectProxyServiceinsteadsince 7.2, injectProxyServiceinsteadsince 7.2, injectProxyServiceinsteadsince 7.1, useProxyUtil.resolveTargetMember(Member, Class)instead. Since 7.2, injectProxyServiceinstead.since 7.2, injectProxyServiceinstead
-
Deprecated Enum ConstantsEnum ConstantDescriptionsince 7.3.0, use
ConversionRule.ELEMENTinstead. TheCollection_xxxkey format has been superseded byElement_xxxsince WebWork 2.1.x; both are handled identically by the engine, andElement_xxxadditionally covers the values of aMap.
StrutsTypeConverterHolder.computeMappingIfAbsent(Class, Function)instead.