.. only:: html

 .. contents:: Table of contents
    :depth: 2
    :local:

Main changes in version 5.0.1 are following.

• Updated the Spring Framework to 4.1.7
• Updated the JSTL to 1.2.5
• Updated the Spring IO Platform to 1.1.3
• Changed some specifications in common library according to fixing bugs
• Improved blank projects

At version 5.0.1, the Spring Framework has been updated to 4.1.7.RELEASE to resolve the security vulnerability.

• [CVE-2015-3192] DoS Attack with XML Input (SPR-13136)

At version 5.0.1, the JSTL has been updated to 1.2.5 to resolve the security vulnerability.

• [CVE-2015-0254] XXE and RCE via XSL extension in JSTL XML tags

At version 5.0.1, the Spring IO Platform has been updated to 1.1.3.RELEASE. This update is due to two security vulnerabilities above. As a result, following libraries have been updated.

• Updated the Spring Security to 3.2.7.RELEASE
• Updated the Spring Data Commons to 1.9.3.RELEASE
• Updated the Spring Data JPA to 1.7.3.RELEASE
• Updated the AspectJ to 1.8.6
• Updated the Jackson to 2.4.6
• Updated the Logback to 1.1.3
• Updated the SLF4J to 1.7.12
• Updated the Hibernate ORM to 4.3.10.Final

At version 5.0.1, some specifications in common library have been changed according to the following bugs in 5.0.0.RELEASE.

• [#285] There are cases that JSP cannot access Code List
• [#297] f:query throws ConverterNotFoundException when the target object contains nested field

At version 5.0.1, some configuration files in blank projects have been improved.

• [multi#126] [single#99] Use property to resolve a log output directory in logback.xml
• [single#105] logback.xml is different between terasoluna-gfw-web-multi-blank and terasoluna-gfw-web-blank
• [multi#110] When deploy as root context, it's unavailable to be go back to the top page
• [multi#131] Specify UTF-8 as default encoding to <jdbc:script >

Migration procedures are as follows.

Note

Legend

Required : This procedure is mandatory.

Required by case : This procedure is mandatory, if conditions match.

Optional : This procedure is recommended. Perform it if you feel the need.

- : This procedure is not required.

[General]

.. tabularcolumns:: |p{0.10\linewidth}|p{0.30\linewidth}|p{0.20\linewidth}|p{0.20\linewidth}|p{0.20\linewidth}|

[Improving Blank project]

.. tabularcolumns:: |p{0.10\linewidth}|p{0.30\linewidth}|p{0.20\linewidth}|p{0.20\linewidth}|p{0.20\linewidth}|

Update TERASOLUNA Server Framework for Java (5.x) Common Library and dependency libraries.

.. tabularcolumns:: |p{0.35\linewidth}|p{0.25\linewidth}|p{0.25\linewidth}|p{0.15\linewidth}|

[Procedure's required cases]

This procedure is required. With this update, two security vulnerabilities and common library's bugs has been resolved.

This update procedure is for the projects which are generated by using mvn archetype.

Update pom file in your parent project. ($YOUR_MULTIPLE_PROJECT_ROOT/pom.xml)

<!-- omitted -->
<parent>
    <groupId>org.terasoluna.gfw</groupId>
    <artifactId>terasoluna-gfw-parent</artifactId>
    <version>5.0.1.RELEASE</version> <!-- ### Need to edit ### -->
</parent>
<!-- omitted -->

This update procedure is for projects that are generated by using mvn archetype or downloaded from the release site.

Update pom file in your project. ($YOUR_SINGLE_PROJECT/pom.xml)

<!-- omitted -->
<parent>
    <groupId>org.terasoluna.gfw</groupId>
    <artifactId>terasoluna-gfw-parent</artifactId>
    <version>5.0.1.RELEASE</version> <!-- ### Need to edit ### -->
</parent>
<!-- omitted -->

This update procedure is for Eclipse WTP project which is downloaded from the release site.

For update procedures, refer to Update libraries for using Eclipse WTP Project .

From version 5.0.1, a log output directory setting has been improved to use a placeholder. For the information, refer to the GitHub multi#126 or GitHub single#99 . With this improving, log output directory can be specified using Java System property(-D<name>=<value>).

[Procedure's required cases]

This procedure is optional. Perform next modification, if feel the need.

[Modification method]

Modify to use a placeholder(${app.log.dir:-log}) at one of the following files.

• $YOUR_MULTIPLE_PROJECT_ROOT/xxx-env/src/main/resources/logback.xml
• $YOUR_SINGLE_PROJECT/src/main/resources/logback.xml
• $YOUR_ECLIPSE_WTP_PROJECT/src/main/resources/logback.xml

<file>${app.log.dir:-log}/projectName-application.log</file> <!-- ### Need to edit ### -->

[For reference]

In version 5.0.0, default setting is as follows.

<file>log/projectName-application.log</file>

From version 5.0.1, three log settings of the single blank project has been changed. For the information, refer to the GitHub single#105 .

[Procedure's required cases]

This procedure is optional. Perform next modification, if feel the need.

[Modification method]

Modify settings at one of the following files.

• $YOUR_SINGLE_PROJECT/src/main/resources/logback.xml
• $YOUR_ECLIPSE_WTP_PROJECT/src/main/resources/logback.xml

Three changes are as follows.

1. Replace to <?xml version="1.0" encoding="UTF-8"?> instead of <!DOCTYPE logback>
2. Change the logger level of "org.terasoluna.gfw" to "info" instead of "debug"
3. Add the logger settings for "jdbc.resultsettable"

<?xml version="1.0" encoding="UTF-8"?> <!-- ### Need to replace ### -->
<configuration>

    <!-- ... -->

    <logger name="org.terasoluna.gfw">
        <level value="info" /> <!-- ### Need to edit ### -->
    </logger>

    <!-- ... -->

    <!-- only for development -->
    <logger name="jdbc.resultsettable"> <!-- ### Need to add ### -->
        <level value="debug" />
    </logger>

    <!-- ... -->

</configuration>

[For reference]

In version 5.0.0, default setting is as follows.

<!DOCTYPE logback>
<configuration>

    <!-- ... -->

    <logger name="org.terasoluna.gfw">
        <level value="debug" />
    </logger>

    <!-- ... -->

</configuration>

From version 5.0.1, the URL for back to top page has been improved. For the information, refer to the GitHub multi#110 .

[Procedure's required cases]

If the following case is matched, apply next modification.

• If deploy to the root context("/")

[Modification method]

Add the "/" character after ${pageContext.request.contextPath} at the following file.

• $YOUR_MULTIPLE_PROJECT_ROOT/xxx-web/src/main/webapp/WEB-INF/views/layout/header.jsp

Note

About target file

JSP files that has same implementation are target file.

<a href="${pageContext.request.contextPath}/">projectName</a> <%-- ### Need to edit ### --%>

[For reference]

In version 5.0.0, default implementation is as follows.

<a href="${pageContext.request.contextPath}">projectName</a>

From version 5.0.1, the character encoding setting of <jdbc:script> has been improved. For the information, refer to the GitHub multi#131 .

[Procedure's required cases]

This procedure is optional. Perform next modification, if feel the need.

[Modification method]

Add the character encoding setting(encoding="UTF-8") at the following file.

• $YOUR_MULTIPLE_PROJECT_ROOT/xxx-env/src//main/resources/META-INF/spring/xxx-env.xml

<jdbc:initialize-database data-source="dataSource"
    ignore-failures="ALL">
    <jdbc:script location="classpath:/database/${database}-schema.sql" encoding="UTF-8" /> <!-- ### Need to edit ### -->
    <jdbc:script location="classpath:/database/${database}-dataload.sql" encoding="UTF-8" /> <!-- ### Need to edit ### -->
</jdbc:initialize-database>

[For reference]

In version 5.0.0, default setting is as follows.

<jdbc:initialize-database data-source="dataSource"
    ignore-failures="ALL">
    <jdbc:script location="classpath:/database/${database}-schema.sql" />
    <jdbc:script location="classpath:/database/${database}-dataload.sql" />
</jdbc:initialize-database>

This update procedure is for Eclipse WTP project which is downloaded from the release site.

Note

Legend

[Table Header]

Non : Blank project for none O/R Mapper

MB3 : Blank project for MyBatis 3

JPA : Blank project for JPA

[Marks]

* : target for operations

Download the Eclipse WTP Project of 5.0.1.RELEASE.

If Eclipse is running, stop the Eclipse.

Update(delete and add) jar files in $YOUR_ECLIPSE_WTP_PROJECT/src/main/webapp/WEB-INF/lib.

.. tabularcolumns:: |p{0.25\linewidth}|p{0.30\linewidth}|p{0.30\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|

Update(delete and add) source jar files in $YOUR_ECLIPSE_WTP_PROJECT/src/main/webapp/WEB-INF/libsrc.

.. tabularcolumns:: |p{0.25\linewidth}|p{0.30\linewidth}|p{0.30\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|

Update the referenced libraries in all of the following files, using replace string.

• $YOUR_ECLIPSE_WTP_PROJECT/.classpath
• $YOUR_ECLIPSE_WTP_PROJECT/build.xml

.. tabularcolumns:: |p{0.25\linewidth}|p{0.30\linewidth}|p{0.30\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|

Delete referenced libraries(following jar files) from the settings of Eclipse WTP project.

• $YOUR_ECLIPSE_WTP_PROJECT/.classpath
• $YOUR_ECLIPSE_WTP_PROJECT/build.xml

.. tabularcolumns:: |p{0.30\linewidth}|p{0.55\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|

[Step for all blank projects]

.classpath

<!-- ### Need to delete following classpath entries ### -->

<!-- omitted -->

<classpathentry kind="lib"
    path="src/main/webapp/WEB-INF/lib/jstl-1.2.jar"
    sourcepath="libsrc/jstl-1.2-sources.jar" />

build.xml

<!-- ### Need to delete following classpath entries ### -->

<path id="build.classpath">
    <!-- ... -->
    <pathelement location="${lib.dir}/jstl-1.2.jar"/>
    <!-- ... -->
</path>

Add referenced libraries(following jar files) to the settings of Eclipse WTP project.

• $YOUR_ECLIPSE_WTP_PROJECT/.classpath
• $YOUR_ECLIPSE_WTP_PROJECT/build.xml

.. tabularcolumns:: |p{0.30\linewidth}|p{0.55\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|p{0.05\linewidth}|

[Step for all blank projects]

.classpath

<!-- ### Need to add following classpath entries ### -->

<!-- ... -->

<classpathentry kind="lib"
    path="src/main/webapp/WEB-INF/lib/taglibs-standard-jstlel-1.2.5.jar"
    sourcepath="libsrc/taglibs-standard-jstlel-1.2.5-sources.jar" />

<classpathentry kind="lib"
    path="src/main/webapp/WEB-INF/lib/taglibs-standard-spec-1.2.5.jar"
    sourcepath="libsrc/taglibs-standard-jstlel-1.2.5-sources.jar" />

<classpathentry kind="lib"
    path="src/main/webapp/WEB-INF/lib/taglibs-standard-impl-1.2.5.jar"
    sourcepath="libsrc/taglibs-standard-impl-1.2.5-sources.jar" />

<!-- ... -->

build.xml

<!-- ### Need to add following classpath entries ### -->

<path id="build.classpath">
    <!-- ... -->
    <pathelement location="${lib.dir}/taglibs-standard-jstlel-1.2.5.jar"/>
    <pathelement location="${lib.dir}/taglibs-standard-spec-1.2.5.jar"/>
    <pathelement location="${lib.dir}/taglibs-standard-impl-1.2.5.jar"/>
    <!-- ... -->
</path>