@@ -3,16 +3,18 @@ SPRING FRAMEWORK CHANGELOG
33http://www.springsource.org
44
55
6- Changes in version 3.0.6 (2011-07-22 )
6+ Changes in version 3.0.6 (2011-07-29 )
77-------------------------------------
88
99* fixed aspects bundle to declare dependencies for @Async aspect as well
1010* ProxyCreationContext uses "ThreadLocal.remove()" over "ThreadLocal.set(null)" as well
1111* DefaultListableBeanFactory is only deserializable through a SerializedBeanFactoryReference
1212* DefaultListableBeanFactory's getBean(name, type) attempts type conversion if necessary
13- * BeanDefinitionVisitor now actually visits factory method names
14- * fixed potential InjectionMetadata NPE when using SpringBeanAutowiringInterceptor
13+ * DefaultListableBeanFactory allows for init methods to register further bean definitions (again)
14+ * XmlBeanDefinitionReader accepts description subelement within map entry as well (as per the XSD)
1515* ConfigurationClassPostProcessor supports use of same processor instance with several factories
16+ * fixed potential InjectionMetadata NPE when using SpringBeanAutowiringInterceptor
17+ * BeanDefinitionVisitor now actually visits factory method names
1618* restored support for String-to-ContextResource conversion
1719* restored original GenericConversionService behavior with respect to empty collections/maps
1820* restored original FormattingConversionService behavior with respect to the use of subtypes
@@ -26,7 +28,10 @@ Changes in version 3.0.6 (2011-07-22)
2628* SimpleClientHttpRequest uses fixed-length streaming mode (always sets content-length header)
2729* FormHttpMessageConverter correctly processes POST requests
2830* ResourceHttpRequestHandler does not set Content-Length header for 304 response
31+ * ResourceHttpRequestHandler detects invalid directory traversal in given path
2932* LocaleChangeInterceptor validates locale values in order to prevent XSS vulnerability
33+ * HtmlUtils properly escapes single quotes as well
34+ * added support for web.xml context-param "springJspExpressionSupport" (explicit "true"/"false")
3035* ContextLoader and FrameworkServlet support "contextId" parameter for custom serialization id
3136* RemoteExporter uses an opaque proxy for 'serviceInterface' (no AOP interfaces exposed)
3237* added "acceptProxyClasses" flag to RemoteInvocationSerializingExporter
0 commit comments