Re: JDK 25 support

Lukasz Lenart <[email protected]> Mon, 18 May 2026 09:23:25 +0200
Newsgroups gmane.comp.jakarta.struts.user
Message-ID <CAMopvkM1aKhCfciRWwp6N2egUjLy7jnO7Ajznk71KJse_RLWZw@mail.gmail.com>
pon., 18 maj 2026 o 06:33 Krishnaraj Viswanathan via user
<[email protected]> napisa=C5=82(a):
>
> Confidential - Oracle Restricted \Including External Recipients
>
> I was checking if Struts would run with jdk25 and I see a possible issue =
with the usage of SecurityManager.
>
> getSecurityManager has been deprecated since Java24 and would return a nu=
ll and setSecurityManager is removed. I see both these used in the Struts c=
ode. The getSecurityManager seems to be used with jasper and some security =
check and I assume there would not be an issue if I am not using jasper.
>
> The setSecurityManager seems to be used for some test classes(com.opensym=
phony.xwork2.inject.ContainerImplTest) and probably not used in run time.
>
> On the surface, I don't think there could be a runtime issue. Could anyon=
e tell if I am right in my assumptions? Of course, a more detailed check wo=
uld be required, but from an initial analysis perspective, am I in the righ=
t path?

We have a dedicated run on JDK25 and all looks good - Struts 7 should
work on Java 25 without an issue
https://github.com/apache/struts/actions/runs/25915386346/job/76170649948


Regards
=C5=81ukasz