Mailing-List: contact dev-help@cocoon.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cocoon.apache.org
Message-ID: <32457445.1185500943827.JavaMail.jira@brutus>
Date: Thu, 26 Jul 2007 18:49:03 -0700 (PDT)
From: "Antonio Gallardo (JIRA)" <jira@apache.org>
To: dev@cocoon.apache.org
Subject: [jira] Commented: (COCOON-2073) Upgrade to dojo 0.4.3 (security
 fixes!)
In-Reply-To: <24197888.1181036185865.JavaMail.jira@brutus>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/COCOON-2073?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12515928 ] 

Antonio Gallardo commented on COCOON-2073:
------------------------------------------

Updated in 2.1, see: http://svn.apache.org/viewvc?view=rev&revision=560056

> Upgrade to dojo 0.4.3 (security fixes!)
> ---------------------------------------
>
>                 Key: COCOON-2073
>                 URL: https://issues.apache.org/jira/browse/COCOON-2073
>             Project: Cocoon
>          Issue Type: Improvement
>          Components: Blocks: Ajax
>    Affects Versions: 2.1.11-dev (Current SVN), 2.2-dev (Current SVN)
>            Reporter: Alexander Klimetschek
>            Assignee: Grzegorz Kossakowski
>
> Current ajax block includes dojo 0.4.1. The current release of dojo is 0.4.3 - in 0.4.2 minor improvements were made but 0.4.3 includes security fixes for cross-site scripting attacks and the guys at dojo strongly recommend upgrading. As far as I can see, there should be no compatibility issues with Cocoon's dojo widgets. 
> http://dojotoolkit.org/releaseNotes/0.4.3

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.