apache官方安全公告页面： http://struts.apache.org/development/2.x/docs/security-bulletins ...