Thymeleaf 3.0.9 和 2.1.6 已发布,Thymeleaf是一个 XML/XHTML/HTML5 模板引擎,可用于 Web 与非 Web 环境中的应用开发。它是一个开源的 Java 库,基于 Apache License 2.0 许可,由 Daniel Fernández 创建。 Thymeleaf 3.0.9 更新内容如下: - Fixed hit ratio in StandardCache not being correctly computed (always 1 or 0). - Improve restricted expression evaluation mode to restrict access to some request features (#request.getParameter(), #request.getParameterValues(), #request.getParameterMap(), #request.getQueryString()). Added new scenarios for restricted expression evaluation: thn*, th:attr, th:src, th:href, default attribute processor, fragment expressions, link expressions (only for URL bases), inlined output expression in TEXT mode. Thymeleaf 2.1.6 更新内容如下: Improve restricted expression evaluation mode to restrict access to some request features (#request.getParameter(), #request.getParameterValues(), #request.getParameterMap(), #request.getQueryString()). Add new scenarios for restricted expression evaluation: thn*, th:attr, th:src, th:href, th:include, th:replace, th:substituteby, link expressions (only for URL bases). 下载地址: http://www.thymeleaf.org/download.html Thymeleaf 3.0.9 和 2.1.6 发布,HTML 5 模板引擎下载地址