Version 2.0.11 added the following features:

• Support for Java 1.4.
• A port Cookie Interceptor that can inject a configurable cookie.
• Automatic portlet support to allow portal and servlet deployments.
• An AJAX theme that allows you to use the flexibility of AJAX tags with a Struts look and feel.
• Zero Configuration options to reduce or eliminate the need for XML configuration.
• REST-ful URLs for using search-engine friendly URLs.

This version also adds several experimental plug-ins:

• The Codebehind plug-in uses 'page controller' conventions to reduce configuration effort.
• The Plexus plug-in allows Plexus to create Struts Actions, Interceptors and Results.
• The Scope plug-in mimics a JBoss Seam style of scoped bijection.  (This allows you to define action properties to be injected before an Action executes, or properties to be pushed out after an Action executes.)
• The Struts1 plug-in allows you to use Struts 1 Actions and ActionForms in Struts 2 applications.
• The Tiles plug-in allows Struts Actions to return Tiles pages.

Version 2.0.11.1 corrected the following two serious security flaws in the Struts 2:

• Tags <s:url> and <s:a> were not encoding URLs.
• s:a was not escaping the "href" attribute value.

Both of these issues could open an installation of Struts to cross-site scripting attacks so project developers and OpenLogic recommend that users upgrade to 2.0.11.1.