Upgrade to Portlet API 2.1 [SPR-13519]

[spring-projects-issues]

Juergen Hoeller opened SPR-13519 and commented

A Portlet 2.1 revision is about to be released, with a new Portlet 2.1 API jar addressing CVE-2015-1926 through a change in the GenericPortlet.serveResource implementration.

---

Issue Links:

• Documentation for Portlet MVC does not refer to Portlet 2.0 spec (JSR-286) [SPR-13513] #18090 Documentation for Portlet MVC does not refer to Portlet 2.0 spec (JSR-286)

[spring-projects-issues]

Juergen Hoeller commented

The 2.1 version of the API has not been released under javax.portlet but rather just under the Apache Portals namespace... assumably since it is only needed by portlet providers, not by Portlet apps. Since we only need the Portlet API for compilation purposes, we can easily stick with 2.0.