From http://cwiki.apache.org/confluence/display/WW/S2-001 and http://issues.apache.org/struts/browse/WW-2030