diff --git a/pom.xml b/pom.xml
index c899751..03fe307 100644
--- a/pom.xml
+++ b/pom.xml
@@ -133,17 +133,17 @@
 		<dependency>
 			<groupId>org.apache.struts</groupId>
 			<artifactId>struts2-core</artifactId>
-			<version>2.5.33</version>
+			<version>6.7.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.struts</groupId>
 			<artifactId>struts2-junit-plugin</artifactId>
-			<version>2.5.33</version>
+			<version>6.7.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.apache.struts</groupId>
 			<artifactId>struts2-convention-plugin</artifactId>
-			<version>2.5.20</version>
+			<version>6.7.0</version>
 		</dependency>
 		<dependency>
 			<groupId>org.springframework.security</groupId>
diff --git a/src/com/fuse/actions/FSActionSupport.java b/src/com/fuse/actions/FSActionSupport.java
index f5112a4..ec13aef 100644
--- a/src/com/fuse/actions/FSActionSupport.java
+++ b/src/com/fuse/actions/FSActionSupport.java
@@ -51,7 +51,7 @@
 public class FSActionSupport extends ActionSupport implements SessionAware, ServletRequestAware, ServletResponseAware { 
 	
 
-	protected SessionMap<String,Object> JSESSION;  
+	protected SessionMap JSESSION;  
 	protected Map<String,String> COOKIES;
 	public HttpServletRequest request = ServletActionContext.getRequest();
 	public HttpServletResponse response = ServletActionContext.getResponse();
diff --git a/src/struts.xml b/src/struts.xml
index b0902ac..56ecc3b 100644
--- a/src/struts.xml
+++ b/src/struts.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8" ?>
 <!DOCTYPE struts PUBLIC
-	"-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
-	"http://struts.apache.org/dtds/struts-2.3.dtd">
+	"-//Apache Software Foundation//DTD Struts Configuration 6.0//EN"
+	"https://struts.apache.org/dtds/struts-6.0.dtd">
 <struts>
     
 	<constant name="struts.multipart.maxSize" value="1000000000"/>
@@ -52,6 +52,8 @@
     </package>
      <constant name="struts.convention.default.parent.package" value="default"/>
      <constant name="struts.devMode" value="false" />
+	<constant name="struts.csp.enable" value="false" />
+	<constant name="struts.csp.policy" value="default-src 'self'; script-src 'self'; style-src 'self'" />
 
     <!-- Add packages here -->
      <constant name="struts.action.excludePattern" value="/(service|api)/.*"/>