This project contains additional configuration, interceptors, and other code used to improve the security of struts 2 applications.

Instructions for using the security addons are provided in the following files:

/WEB-INF/classes/

example.xml example-auth.xml struts-securityaddon-withauth.xml struts-securityaddon.xml struts.xml

This project uses the struts2-blank project as a starting point. The following items were added:

WEB-INF/classes/

example.xml example-auth.xml struts-securityaddon-withauth.xml struts-securityaddon.xml struts.xml

com.nickcoblentz.struts2.interceptors

AuthenticationInterceptor CachingHeadersInterceptor RequireSSLInterceptor RolesInterceptor

com.nickcoblentz.struts2.actions

BaseAction

The following blog entries discuss these items in more detail