This Week in Grails (2012-13)

Grails 2.0.2 and 1.3.8 were released this week, primarily to address parameter binding issues. See the release notes for 2.0.2 and Jeff’s blog post on the data binding issues. You should also read the SpringSource security advisory CVE-2012-1833 and Marc Palmer’s blog post “Inside the Grails dependency injection binding vulnerability”.

It turns out that the new whitelisting features in 2.0.2 were a bit too aggressive, so expect a 2.0.3 release soon to address that. 1.3.8 isn’t affected since it only fixes the dependency injection issue and updated the url for the central plugin repository.

The path to the Groovy jar in the 2.0.2 lib directory changed, and this affects importing projects in STS. Check out this post for how to update to a version with the fix. Graeme also pointed out that you can copy the lib directory contents from a 2.0.1 install onto the 2.0.2 lib directory.

Marco Vermeulen has updated the Linux releases of 1.3.8 and 2.0.2.

Marc Palmer has been busy, releasing an early version of his “Platform Core Plugin”. Also see this post for more details. And you can get paid support for the plugin through Grailsrocks. Also check out Marc’s post “Hooking up Platform Core Security API to your Security Provider”.

If you want to keep up with these “This Week in Grails” posts you can access them directly via their category link or in an RSS reader with the feed for just these posts.

Translations of this post:


There were 5 new plugins released:

  • dustjs version 0.2. Supports server-side compilation of .dust template files to their .js counterparts
  • platform-core version 1.0.M1. Provides functionality for plugins to use to achieve greater integration with each other and with applications
  • xsd-reverse-engineer version 0.2.1. Convert XSD document to GORM objects
  • events-si version 1.0.M1. Standard Events system for Grails implementation; it is a Spring Integration implementation and uses its artefacts to map listeners, senders and events messages
  • less-resources version Compile .less files into .css files

and 4 updated plugins:

Interesting Tweets


User groups and Conferences

3 Responses to “This Week in Grails (2012-13)”

  1. Donal says:

    The problem with moving around the JARs in 2.0.2 also affects IntelliJ (though maybe Spring Source employees aren’t allowed to mention that 🙂

    A fix for the issue is documented here:

    • Burt says:

      Yes, we’re strictly forbidden from mentioning competing IDEs because of the potentially significant loss of STS sales revenue 🙂

      I’ve used Eclipse for almost 10 years so I use STS for Grails. I have nothing against IntelliJ, but I don’t pay much attention to it and assume IntelliJ zealots will spread the word.

      • Burt says:

        Also – 2.0.3 will be out this week and will restore the previous jar file paths, so both IDEs will work fine without needing updates.

Creative Commons License
This work is licensed under a Creative Commons Attribution 3.0 License.