Merge pull request #11 from pnicolucci/UpdateSiteFor238Release

Update site  for MyFaces Core 2.3.8 release
diff --git a/core23.md b/core23.md
index 9c62bbd..f4d0080 100644
--- a/core23.md
+++ b/core23.md
@@ -17,22 +17,22 @@
 
 |     | Mirrors                                                                                                                      | Checksum                                                                                                                     | Signature                                                                                                                                |
 |-----------------|------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------|
-| binary (tar.gz) | [myfaces-core-assembly-2.3.7-bin.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.tar.gz) | [myfaces-core-assembly-2.3.7-bin.tar.gz.sha512](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.tar.gz.sha512) | [myfaces-core-assembly-2.3.7-bin.tar.gz.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.tar.gz.asc) |
-| binary (zip)    | [myfaces-core-assembly-2.3.7-bin.zip](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.zip)       | [myfaces-core-assembly-2.3.7-bin.zip.sha512](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.zip.sha512)       | [myfaces-core-assembly-2.3.7-bin.zip.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.7-bin.zip.asc)       |
-| source (tar.gz) | [myfaces-core-assembly-2.3.7-src.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.3.7-src.tar.gz)   | [myfaces-core-assembly-2.3.7-src.tar.gz.sha512](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.7-src.tar.gz.sha512)   | [myfaces-core-assembly-2.3.7-src.tar.gz.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.7-src.tar.gz.asc)   |
-| source (zip)    | [myfaces-core-assembly-2.3.7-src.zip](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.3.7-src.zip)         | [myfaces-core-assembly-2.3.7-src.zip.sha512](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.7-src.zip.sha512)         | [myfaces-core-assembly-2.3.7-src.zip.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.7-src.zip.asc)         |
+| binary (tar.gz) | [myfaces-core-assembly-2.3.8-bin.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.tar.gz) | [myfaces-core-assembly-2.3.8-bin.tar.gz.sha512](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.tar.gz.sha512) | [myfaces-core-assembly-2.3.8-bin.tar.gz.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.tar.gz.asc) |
+| binary (zip)    | [myfaces-core-assembly-2.3.8-bin.zip](http://www.apache.org/dyn/closer.lua/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.zip)       | [myfaces-core-assembly-2.3.8-bin.zip.sha512](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.zip.sha512)       | [myfaces-core-assembly-2.3.8-bin.zip.asc](https://downloads.apache.org/myfaces/binaries/myfaces-core-assembly-2.3.8-bin.zip.asc)       |
+| source (tar.gz) | [myfaces-core-assembly-2.3.8-src.tar.gz](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.3.8-src.tar.gz)   | [myfaces-core-assembly-2.3.8-src.tar.gz.sha512](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.8-src.tar.gz.sha512)   | [myfaces-core-assembly-2.3.8-src.tar.gz.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.8-src.tar.gz.asc)   |
+| source (zip)    | [myfaces-core-assembly-2.3.8-src.zip](http://www.apache.org/dyn/closer.lua/myfaces/source/myfaces-core-assembly-2.3.8-src.zip)         | [myfaces-core-assembly-2.3.8-src.zip.sha512](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.8-src.zip.sha512)         | [myfaces-core-assembly-2.3.8-src.zip.asc](https://downloads.apache.org/myfaces/source/myfaces-core-assembly-2.3.8-src.zip.asc)         |
 
 ## Dependency
 ```xml
 <dependency>
   <groupId>org.apache.myfaces.core</groupId>
   <artifactId>myfaces-api</artifactId>
-  <version>2.3.7</version>
+  <version>2.3.8</version>
 </dependency>
 <dependency>
   <groupId>org.apache.myfaces.core</groupId>
   <artifactId>myfaces-impl</artifactId>
-  <version>2.3.7</version>
+  <version>2.3.8</version>
 </dependency>
 ```
 
@@ -196,7 +196,7 @@
 | o.a.m.CLIENT_VIEW_STATE_TIMEOUT | 2.1.9, 2.0.15 | 0 |  | Define the time in minutes where the view state is valid when client side state saving is used |
 | o.a.m.COMPRESS_STATE_IN_SESSION | 1.1 | true | true,false | Indicates that the serialized state will be compressed before it is written to the session |
 | o.a.m.USE_FLASH_SCOPE_PURGE_VIEWS_IN_SESSION | 2.0.6 | false | true, false | Allow use flash scope to keep track of the views used in session and the previous ones, so server side state saving can delete old views even if POST-REDIRECT-GET pattern is used |
-| o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN | 2.1.9, 2.0.15 | none | secureRandom, random, none | Adds a random key to the generated view state session token |
+| o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN | 2.1.9, 2.0.15 | secureRandom | secureRandom, random | Adds a random key to the generated view state session token. As of version 2.3.8 the default switched from `random` to `secureRandom` |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_LENGTH | 2.1.9, 2.0.15 | 8 |  | Set the default length of the random key added to the view state session token |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_SECURE_RANDOM_CLASS | 2.1.9, 2.0.15 |  |  | Sets the random class to initialize the secure random id generator |
 | o.a.m.RANDOM_KEY_IN_VIEW_STATE_SESSION_TOKEN_SECURE_RANDOM_PROVIDER | 2.1.9, 2.0.15 |  |  | Sets the random provider to initialize the secure random id generator |
@@ -209,12 +209,13 @@
 | o.a.m.NUMBER_OF_SEQUENTIAL_VIEWS_IN_SESSION | 2.0.6 | 4 |  | Indicates the amount of views (default is not active) that should be stored in session between sequential POST or POST-REDIRECT-GET if org |
 | o.a.m.NUMBER_OF_FLASH_TOKENS_IN_SESSION | 2.2.6 |  |  | Indicate the max number of flash tokens stored into session |
 | o.a.m.FACES_FLOW_CLIENT_WINDOW_IDS_IN_SESSION | 2.2.6 |  |  | Indicate the max number of client window ids stored into session by faces flow |
-| o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN | 2.2.0 | none | secureRandom, random | Defines how to generate the csrf session token |
+| o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN | 2.2.0 | secureRandom | secureRandom, random | Defines how to generate the csrf session token. As of version 2.3.8 the default switched from `random` to `secureRandom`. |
 | o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN_LENGTH | 2.2.0 | 16 |  | Set the default length of the random key used for the csrf session token |
 | o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN_SECURE_RANDOM_CLASS | 2.2.0 |  |  | Sets the random class to initialize the secure random id generator |
 | o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN_SECURE_RANDOM_PROVIDER | 2.2.0 |  |  | Sets the random provider to initialize the secure random id generator |
 | o.a.m.RANDOM_KEY_IN_CSRF_SESSION_TOKEN_SECURE_RANDOM_ALGORITM | 2.2.0 | SHA1PRNG |  | Sets the random algorithm to initialize the secure random id generator |
 | o.a.m.AUTOCOMPLETE_OFF_VIEW_STATE | 2.2.8, 2.1.18, 2.3.6 | true | true, false | Add autocomplete="off" to the view state hidden field |
+| o.a.m.RANDOM_KEY_IN_WEBSOCKET_SESSION_TOKEN | 2.2.0 | secureRandom | secureRandom, random | Defines how to generate the csrf session token. As of version 2.3.8 the default switched from `random` to `secureRandom`.|
 
 ### Deprecated
 | Name | Since | Default value | Expected values | Description |
diff --git a/news.md b/news.md
index d23166f..7a24237 100644
--- a/news.md
+++ b/news.md
@@ -1,6 +1,12 @@
 # News
 
 
+## February 02, 2021 - MyFaces Core 2.3.8 released
+
+MyFaces Core 2.3.8 have been released. It is available from the [Download](/core23?id=downloads) page, and in the central Maven repository under Group ID "org.apache.myfaces.core".
+
+Release notes can be found here: [2.3.8](https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=10600&version=12349324)
+
 ## January 29, 2021 - MyFaces Core 3.0.0 released
 
 MyFaces Core 3.0.0 have been released. It is available from the [Download](/core30?id=downloads) page, and in the central Maven repository under Group ID "org.apache.myfaces.core".