Following yesterdays Atlassian security advisory for Confluence, it looks like there are some added steps required for people who have user macros. Be careful folks.

@BergerofLondon spotted this first:

The update to atlassian-xwork-core-1.17.jar means you have to be more specific with your coding. Thanks to @BergerofLondon for the heads up.