FreeMarker

This release contains two important security workarounds, which are detailed in the change log. It also contains some new features and bugfixes.

A bug introduced in 2.3.17 that affects the JSP taglib support was fixed.

A security issue was fixed. Updating to this version is recommended. Many bugs were fixed and quite a few new features were included in this release.

This release fixed incorrect unwrapping of sequences to Java arrays It fixes incorrect rounding of float and double values. It creates a new freemarker.runtime.attempt category where exceptions caught in <#attempt> blocks are logged. It fixes RhinoWrapper not working with all versions of Rhino. It fixes a bug where TextUtil.XMLEncNQG didn't escape ]]> as ]]&gt; It fixes a bug where the root directory couldn't be used as the template base directory. FreemarkerServlet now cooperates with Session Fixation Attack Protection in Spring Security. It substantially improves the performance of the <#return> directive.

JSP-like include support in the FreemarkerServlet, improved JavaRebel compliance, and some bugfixes.