cordova-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From dblot...@apache.org
Subject svn commit: r1692041 [2/16] - in /cordova/site: public/ public/announcements/2013/11/15/ public/announcements/2013/11/22/ public/announcements/2013/12/16/ public/announcements/2014/02/20/ public/announcements/2014/05/23/ public/announcements/2014/08/04...
Date Tue, 21 Jul 2015 01:00:01 GMT
Modified: cordova/site/public/announcements/2014/05/23/cordova-350.html
URL: http://svn.apache.org/viewvc/cordova/site/public/announcements/2014/05/23/cordova-350.html?rev=1692041&r1=1692040&r2=1692041&view=diff
==============================================================================
--- cordova/site/public/announcements/2014/05/23/cordova-350.html (original)
+++ cordova/site/public/announcements/2014/05/23/cordova-350.html Tue Jul 21 01:00:00 2015
@@ -19,20 +19,9 @@
     <!-- Cordova CSS -->
     <link rel="stylesheet" type="text/css" href="//cordova.apache.org/css/master.css">
     <script src="//cordova.apache.org/js/smooth.pack.js" type="text/javascript"></script>
-    <script type="text/javascript">
-      var _gaq = _gaq || [];
-      _gaq.push(['_setAccount', 'UA-94271-30']);
-      _gaq.push(['_trackPageview']);
-      (function() {
-        var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
-        ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
-        var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
-      })();
-    </script>
 </head>
 
 <body>
-
     <a class="scroll-point pt-top" name="top">
 </a>
 <div id="header">
@@ -63,498 +52,298 @@
 </div> <!-- /header -->
 <div class="header-placeholder"></div>
 
-
-        <div class="site">
+    <div class="site">
     <h2>Apache Cordova 3.5.0</h2>
     <div class="meta">Posted by: <a href="https://twitter.com/stevesgill">Steve Gill</a></div>
     <p class="meta">23 May 2014</p>
     <div class="post">
-    
-<p>We are happy to announce that <code>Apache Cordova 3.5</code> has been released!</p>
+    <p>We are happy to announce that <code>Apache Cordova 3.5</code> has been released!</p>
 
 <p>Most notable changes include:</p>
 
 <ul>
-<li>Common code between <code>cordova-cli</code> &amp; <code>cordova-plugman</code> has been moved into its own repo named <code>cordova-lib</code>.</li>
-
-<li>Each platform now has a <code>package.json</code> file and has been uploaded to <code>npm</code>. Future updates to the <code>cordova-cli</code> will make use of <code>npm</code> instead of <code>git</code> for loading platforms.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-4863">CB-4863</a> - Drop <strong>iOS</strong> 5.0 support, and support <code>arm64</code>. New projects are built as a universal binary (64 and 32-bit), and require a minimum deployment target of iOS 6.0.</li>
-
-<li>This is the last release with support for <strong>WP7</strong></li>
-
-<li>Added Chrome devtools support for debug builds for <strong>amazon-fireos</strong></li>
+  <li>Common code between <code>cordova-cli</code> &amp; <code>cordova-plugman</code> has been moved into its own repo named <code>cordova-lib</code>.</li>
+  <li>Each platform now has a <code>package.json</code> file and has been uploaded to <code>npm</code>. Future updates to the <code>cordova-cli</code> will make use of <code>npm</code> instead of <code>git</code> for loading platforms.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-4863">CB-4863</a> - Drop <strong>iOS</strong> 5.0 support, and support <code>arm64</code>. New projects are built as a universal binary (64 and 32-bit), and require a minimum deployment target of iOS 6.0.</li>
+  <li>This is the last release with support for <strong>WP7</strong></li>
+  <li>Added Chrome devtools support for debug builds for <strong>amazon-fireos</strong></li>
 </ul>
 
 <p>To upgrade: (replace <code>android</code> with the platform you want to update):</p>
 
 <pre><code>npm install -g cordova
 cd my_project
-cordova platform update android</code></pre>
+cordova platform update android
+</code></pre>
 
 <p>For non-CLI projects or for pre-3.0 projects, refer to the <a href="http://cordova.apache.org/docs/en/3.5.0/guide_platforms_index.md.html">upgrade guides</a>.</p>
 
-<p>Other changes include: <!--more--></p>
-
-<h2 id="whats_new_in_android">What’s new in Android</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-6552">CB-6552</a> added top level <code>package.json</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6543">CB-6543</a> Fix <code>cordova/run</code> failure when no <code>custom_rules.xml</code> available</li>
-
-<li><code>defaults.xml</code>: Add <code>AndroidLaunchMode</code> preference</li>
-
-<li>Add <code>JavaDoc</code> for <code>CordovaResourceApi</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6388">CB-6388</a> Handle binary data correctly in <code>LOAD_URL</code> bridge</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6048">CB-6048</a> Set <code>launchMode=singleTop</code> so tapping app icon does not always restart app</li>
-
-<li>Remove incorrect usage of <code>AlertDialog.Builder.create</code></li>
-
-<li>Catch uncaught exceptions in from plugins and turn them into error responses.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6047">CB-6047</a> Fix online sometimes getting in a bad state on page transitions.</li>
-
-<li>Add another convenience overload for <code>CordovaResourceApi.copyResource</code></li>
-
-<li>Update framework’s .classpath to what <strong>Eclipse</strong> wants it to be.</li>
-
-<li>README.md: <code>android update</code> to <code>android-19</code>.</li>
-
-<li>Fix NPE when POLLING bridge mode is used.</li>
-
-<li>Updating NOTICE to include <em>Square</em> for <code>OkHttp</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5398">CB-5398</a> Apply <code>KitKat</code> content URI fix to all content URIs</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5398">CB-5398</a> Work-around for <code>KitKat</code> content: URLs not rendering in <code>&lt;img&gt;</code> tags</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5908">CB-5908</a> add splashscreen images to template</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5395">CB-5395</a> Make scheme and host (but not path) case-insensitive in whitelist</li>
-
-<li>Ignore multiple <code>onPageFinished()</code> callbacks &amp; <code>onReceivedError</code> due to <code>stopLoading()</code></li>
-
-<li>Removing <code>addJavascriptInterface</code> support from all <strong>Android</strong> versions lower than 4.2 due to security vulnerability</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-4984">CB-4984</a> Don’t create on <code>CordovaActivity</code> name</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5917">CB-5917</a> Add a <code>loadUrlIntoView</code> overload that doesn’t recreate plugins.</li>
-
-<li>Use thread pool for load timeout.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5715">CB-5715</a> For CLI, hide <code>assets/www</code> and <code>res/xml/config.xml</code> by default</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5793">CB-5793</a> ant builds: Rename <code>AndroidManifest</code> during -post-build to avoid <strong>Eclipse</strong> detecting <code>ant-build/</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5889">CB-5889</a> Make update script find project name instead of using <code>null</code> for <code>CordovaLib</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5889">CB-5889</a> Add a message in the update script about needing to import <code>CordovaLib</code> when using an IDE.</li>
-</ul>
-
-<h2 id="whats_new_in_ios">What’s new in iOS</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-6638">CB-6638</a> - Convert <code>CordovaLibTests</code> to <code>XCTests</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6579">CB-6579</a> - <code>CDVWebViewDelegateTests</code> are failing</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6580">CB-6580</a> - <code>CDVWhitelistTests</code> are failing</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6578">CB-6578</a> - Fix <code>CordovaLibTests</code> not building</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6553">CB-6553</a> added top-level <code>package.json</code> file</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6500">CB-6500</a> - Cordova requires <code>arm64</code> architecture.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6383">CB-6383</a> Fix <code>copy-www-build-step.sh</code> when user has macports installed</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6327">CB-6327</a> Allow ‘.’ in plugin feature names (and therefore callback ids)</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6287">CB-6287</a> - Add build script support for <code>arm64</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6340">CB-6340</a> - Adding rebroadcast capabilities to remote notification registration within <code>AppDelegate</code> (closes #94)</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6217">CB-6217</a> <strong>iOS</strong> simulator targets not consistent across scripts</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5286">CB-5286</a> - Fix warnings when compiled under <code>arm64</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-4863">CB-4863</a> - Drop <strong>iOS</strong> 5.0 support, and support <code>arm64</code>. New projects are built as a universal binary (64 and 32-bit), and require a minimum deployment target of iOS 6.0.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6149">CB-6149</a> - <code>AppDelegate</code> uses deprecated <code>handleOpenURL</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6150">CB-6150</a> - <code>objc_msgSend</code> causes <code>EXC_BAD_ACCESS</code> with plugins on <code>arm64</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5018">CB-5018</a> - <code>bin/create</code> on <strong>iOS</strong> should use <code>--arc</code> by default</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5943">CB-5943</a> - Update/remove obsolete items in <code>cordova-ios</code> repo</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5395">CB-5395</a> Make scheme and host (but not path) case-insensitive in whitelist</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5991">CB-5991</a> Fix <code>whitelist</code> path matching for trailing slashes</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5967">CB-5967</a> Fix <code>isTopLevelNavigation</code> not being set correctly in rare cases.</li>
-
-<li>Validate that callback IDs are always well-formed</li>
+<p>Other changes include:
+<!--more--></p>
 
-<li>Removed obsolete <code>.gitmodules</code></li>
-
-<li>Update <strong>Xcode</strong> <code>.pbxproj</code> files according to <strong>Xcode</strong> 5.1 recommendations</li>
-
-<li>Added <code>NSLog</code> notification for beginning backup to <code>iCloud</code> (closes #96)</li>
-</ul>
-
-<h2 id="whats_new_in_windows_phone_7__8">What’s new in Windows Phone 7 &amp; 8</h2>
+<h2 id="whats-new-in-android">What’s new in Android</h2>
 
 <ul>
-<li>Update release-notes, and state that <strong>WP7</strong> support is about to disappear</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6558">CB-6558</a> added <code>package.json</code> file for <strong>WP8</strong></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6450">CB-6450</a> added support for local <code>XHR.responseXML getter</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6341">CB-6341</a> don’t rely on <code>msbuild</code> being in the path.</li>
-
-<li>applied Sergey’s SpecificVersion flag fix to the <strong>WP7</strong> template also <a href="https://issues.apache.org/jira/browse/CB-6103">CB-6103</a></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6103">CB-6103</a> <strong>WP8</strong> <code>CordovaDeploy</code> potential build issue</li>
-
-<li>applied <a href="https://issues.apache.org/jira/browse/CB-6268">CB-6268</a> <code>backgroundcolor</code> to <code>WP7</code> also</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6268">CB-6268</a> <strong>WP8</strong>. Apply <code>BackgroundColor</code> from <code>config.xml</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5965">CB-5965</a> support set responseType, get response</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6299">CB-6299</a> Strip protocol and leading slashes from <code>XHRLOCAL URL</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6091">CB-6091</a> <strong>Windows</strong> Build fails if application path contains whitespace</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6041">CB-6041</a> <code>createTemplates</code> should install them for <code>VS-2013</code> as well</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5219">CB-5219</a> <code>weinre</code> disconnects when <code>history.replaceState</code> is used</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5951">CB-5951</a> Added <code>namespace</code> to <code>config.xml</code></li>
-
-<li>Removed <strong>WP7</strong> template ref to non-existent file</li>
-</ul>
-
-<h2 id="whats_new_in_windows_8">What’s new in Windows 8</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-6684">CB-6684</a> [3.5.0rc]<strong>Windows8</strong> Splash screen setting breaks the build</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6686">CB-6686</a> [3.5.0rc]<strong>Windows8</strong> Build error if path contains whitespace</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6557">CB-6557</a> added <code>package.json</code> to <strong>Windows8</strong></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6309">CB-6309</a> <strong>Windows8</strong>. Add Splash Screen img support via <code>config.xml</code> preference, <a href="https://issues.apache.org/jira/browse/CB-6544">CB-6544</a> <code>SplashScreenBack</code></li>
-
-<li>Fix for when <code>background-color</code> and/or <code>content-src </code>aren’t specified in <code>config.xml</code></li>
-
-<li>Background color now applied to <strong>Windows8</strong> project config during build process.</li>
-
-<li>Fix <code>build/deploy</code> errors when path to project contains spaces</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6435">CB-6435</a> <code>./VERSION</code> &amp; <code>/template/VERSION</code> updated</li>
-
-<li>Modify execution policy restrictions removal logic. Using PS native cmdlet to remove restrictions.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6397">CB-6397</a> <strong>Windows8</strong> Use the latest version of <code>MSBuild Tools</code> installed to build the app</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6256">CB-6256</a> <a href="https://issues.apache.org/jira/browse/CB-6266">CB-6266</a> Add support for domain whitelist and start page settings to <strong>Windows8</strong></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-2970">CB-2970</a> <a href="https://issues.apache.org/jira/browse/CB-2953">CB-2953</a> log unsupported methods and exit with code 1</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-2978">CB-2978</a> <code>list-devices</code> not supported on <strong>Windows 8</strong></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6091">CB-6091</a> <strong>Windows</strong> Build fails if application path contains whitespace</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6083">CB-6083</a> <strong>Windows8</strong> Use registry to read <code>msbuild</code> tools path</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6042">CB-6042</a> <strong>Windows8</strong> <code>Cordova emulate</code> fails if no developer certificate is installed</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5951">CB-5951</a> Added <code>namespace</code> to <code>config.xml</code></li>
-
-<li>Remove template file after create by name</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-4533">CB-4533</a> return error code 2 on fail, <a href="https://issues.apache.org/jira/browse/CB-5359">CB-5359</a> get tools version from the registry</li>
-</ul>
-
-<h2 id="whats_new_in_blackberry_10">What’s new in BlackBerry 10</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-6554">CB-6554</a> updated <code>package.json</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6522">CB-6522</a> Disallow space in target name</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move config logic to its own module</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6398">CB-6398</a> Support additional commands in <code>blackberry10.json</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Switch to grunt as task runner</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> <code>chmod -x *.bat</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>scripts/lib</code> dir</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>utils.js</code> from bin to template</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>+x</code> from <code>.bat</code> files</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> create - use <code>shelljs</code> rather than custom copy function</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>create.js</code> to <code>lib</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>check_reqs.js</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>signing-utils</code> out of <code>bin</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6416">CB-6416</a> Ensure target dictionary exists in properties object</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6410">CB-6410</a> Allow deployment when debug token cannot be generated</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6409">CB-6409</a> Allow detection of devices which have not yet set password</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6346">CB-6346</a> Remove <code>npm</code> warning from <code>README.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6376">CB-6376</a> <code>backgroundColor</code> in <code>user.js</code> is missing quotes</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6346">CB-6346</a> - Add <code>node_modules</code> to source control</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6326">CB-6326</a> Fix inconsistency between manually added vs auto-detected emulators</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6326">CB-6326</a> (cordova-blackberry) <code>target-utils.js</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6303">CB-6303</a> Remove titles from non-content web views</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6303">CB-6303</a> Add <code>aria-hidden=&quot;true&quot;</code> to controller webview body</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6241">CB-6241</a> Default to prompting for passwords (replace <code>--query</code> with <code>--no-query</code>)</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6222">CB-6222</a> Various updates for the <strong>BlackBerry 10</strong> documentation</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6058">CB-6058</a> - Options file removed from output bar. Now in build directory</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6021">CB-6021</a> Add <code>--release</code> to run command</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5723">CB-5723</a> Build script should accept <code>-l</code> param as it does <code>--loglevel</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6019">CB-6019</a> Supply default value of <code>--device</code> to the run script</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5660">CB-5660</a> use <code>enabledelayedexpansion</code> to handle )s in path</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5909">CB-5909</a> Fixed issue where <code>check-reqs</code> skipped checking logic on second pass-through</li>
-</ul>
-
-<h2 id="whats_new_in_firefox_os">What’s new in Firefox OS</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-5816">CB-5816</a> <strong>Firefox OS</strong> - add build script</li>
-
-<li>Remove unused elements from <code>defaults.xml</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6555">CB-6555</a> updated top level <code>package.json</code> file</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5416">CB-5416</a> Need to auto generate manifest.webapp with appropriate plugin permissions</li>
-</ul>
-
-<h2 id="whats_new_in_ubuntu_touch">What’s new in Ubuntu (touch)</h2>
-
-<ul>
-<li>allow inter plugin communication</li>
-
-<li>add <code>.editorconfig</code></li>
-
-<li>check requirements before build</li>
-
-<li><code>bin/build</code>: fixes for <code>--nobuild</code></li>
-
-<li><code>bin/build</code>: specify framework instead of series for click <code>chroot</code></li>
-
-<li><code>bin/build</code>: switch to async shelljs.exec</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6559">CB-6559</a> added top level <code>package.json</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-</ul>
-
-<h2 id="whats_new_in_amazon_fireos">What’s new in Amazon FireOS</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-6644">CB-6644</a> Add a check for webview being null in template code. Added a check and some comments to guide devs.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6487">CB-6487</a> Fixed WebView not found in Chrome remote debugging</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6636">CB-6636</a> Need to destroy webview properly. Added <code>destroy()</code> call in webview’s <code>handleDestroy()</code> method.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6543">CB-6543</a> Fix <code>cordova/run</code> failure when no <code>custom_rules.xml</code> available</li>
-
-<li>defaults.xml: Add <code>AndroidLaunchMode</code> preference</li>
-
-<li>Add <code>JavaDoc</code> for <code>CordovaResourceApi</code></li>
-
-<li>Updated log statement - <code>android=&gt;amazon-fireos</code>.</li>
-
-<li>Added <strong>Amazon</strong> <code>xmlns</code> to project’s template <code>AndroidManifest.xml</code>.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6392">CB-6392</a> Adding <strong>amazon-fireos</strong> platform fails with not so good error reporting</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6556">CB-6556</a> added top level <code>package.json</code> file</li>
-
-<li>Adding a safety check to prevent applications from calling init twice Changes to address thread safety concerns in <code>Cordova</code> plugin management</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6388">CB-6388</a> Handle binary data correctly in <code>LOAD_URL</code> bridge</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6048">CB-6048</a> Set <code>launchMode=singleTop</code> so tapping app icon does not always restart app</li>
-
-<li>Fixing back button issue by utilizing <code>onBackPressed</code> instead of <code>onKeyUp</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5744">CB-5744</a> Unable to build Hello World application for Kindle Fire HDX tablet using <strong>Cordova</strong> 3.3.0</li>
-
-<li>Added overloaded constructor for <code>CordovaWebView</code> with Bundle as parameter.</li>
-
-<li>Catch uncaught exceptions in from plugins and turn them into error responses.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6047">CB-6047</a> Fix online sometimes getting in a bad state on page transitions.</li>
-
-<li>Add another convenience overload for <code>CordovaResourceApi.copyResource</code></li>
-
-<li>Update framework’s .classpath to what <strong>Eclipse</strong> wants it to be.</li>
-
-<li>Updated <strong>Android</strong> target to <code>android-19</code>.</li>
-
-<li>README.md: <code>android update</code> to <code>android-19</code>.</li>
-
-<li>Fix NPE when POLLING bridge mode is used.</li>
-
-<li>Updating NOTICE to include <code>Square</code> for <code>OkHttp</code></li>
-</ul>
-
-<h2 id="whats_new_in_cordovacli">What’s new in Cordova-CLI</h2>
-
-<ul>
-<li><a href="https://issues.apache.org/jira/browse/CB-5941">CB-5941</a> Update link to <code>hooks-README.md</code> file from <code>README.md</code></li>
-
-<li>Fix <code>cordova help</code> command</li>
-
-<li>Fixing failing CLI tests by removing ‘experimental’ key</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6649">CB-6649</a> Removing experimental flag from positional arguments</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6648">CB-6648</a> Adding a flag for experimental features</li>
-
-<li>Fix require paths to use <code>cordova-lib</code></li>
-
-<li>Update <code>package.json</code> to use <code>cordova-lib</code></li>
-
-<li>Split out <code>cordova-lib</code>: move <code>cordova-cli</code> files</li>
-
-<li><strong>Windows8</strong> re-added <code>BOM</code> : <a href="https://issues.apache.org/jira/browse/CB-5421">CB-5421</a> Add <code>BOM</code> to all html, js, css files to ensure app can pass <strong>Windows</strong> Store Certification</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
-
-<li><code>android-parser</code>: Add <code>AndroidLaunchMode</code> preference</li>
-
-<li>Fix <code>CLI</code> tests to work with <code>node</code> v0.11</li>
-
-<li>Update version of jasmine-node. Fixes test warnings util.print with node 0.11</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-2606">CB-2606</a> <strong>Android</strong> icon - do not attempt copy to undefined path</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-2606">CB-2606</a> Icons support for <strong>iOS</strong>, <strong>Android</strong>, <strong>BB10</strong>, <strong>WP8</strong>, <strong>Win8</strong>, <strong>FxOS</strong></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6329">CB-6329</a> Delete unused <code>info-utils.js</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6329">CB-6329</a> improve <code>cordova info</code> command</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5847">CB-5847</a> <code>strictSSL</code> is no longer ignored</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6432">CB-6432</a> <code>pre_package</code> hook does not populate <code>%CORDOVA_PLATFORMS%</code></li>
-
-<li>Revert “CB-6267 <strong>Windows8</strong>. Apply <code>BackgroundColor</code> from <code>config.xml</code>”</li>
-
-<li>Recreate “platforms” dir if it was deleted.</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-5093">CB-5093</a> Add <code>versionCode</code> and <code>CFBundleVersion</code> during prepare</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6312">CB-6312</a> Use <code>landscape</code> instead of <code>userLandscape</code> in <code>AndroidManifest.xml</code></li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6421">CB-6421</a> Move tests from <code>e2e</code> to <code>spec</code> - cli test</li>
-
-<li><a href="https://issues.apache.org/jira/browse/CB-6377">CB-6377</a> <code>superspawn</code>: always wrap non <code>.exe</code> with spaces to <code>cmd</code> with /s /c</li>
-</ul>
-
-<h2 id="whats_new_in_cordovaplugman">What’s new in Cordova-Plugman</h2>
-
-<ul>
-<li>Update <code>plugman cli</code> to use <code>cordova-lib</code></li>
-
-<li>Split out <code>cordova-lib</code>: move <code>cordova-plugman</code> files</li>
-</ul>
-
-<h2 id="plugin_versions_tested_with_this_release">Plugin versions tested with this release</h2>
-
-<ul>
-<li>cordova-plugin-battery-status: 0.2.8</li>
-
-<li>cordova-plugin-camera: 0.2.9</li>
-
-<li>cordova-plugin-console: 0.2.8</li>
-
-<li>cordova-plugin-contacts: 0.2.10</li>
-
-<li>cordova-plugin-device: 0.2.9</li>
-
-<li>cordova-plugin-device-motion: 0.2.7</li>
-
-<li>cordova-plugin-device-orientation: 0.3.6</li>
-
-<li>cordova-plugin-dialogs: 0.2.6</li>
-
-<li>cordova-plugin-file: 1.1.0</li>
-
-<li>cordova-plugin-file-transfer: 0.4.3</li>
-
-<li>cordova-plugin-geolocation: 0.3.7</li>
-
-<li>cordova-plugin-globalization: 0.2.7</li>
-
-<li>cordova-plugin-inappbrowser: 0.4.0</li>
-
-<li>cordova-plugin-media: 0.2.10</li>
-
-<li>cordova-plugin-media-capture: 0.3.0</li>
-
-<li>cordova-plugin-network-information: 0.2.8</li>
-
-<li>cordova-plugin-splashscreen: 0.3.0</li>
-
-<li>cordova-plugin-statusbar: 0.1.3</li>
-
-<li>cordova-plugin-vibration: 0.3.8</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6552">CB-6552</a> added top level <code>package.json</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6543">CB-6543</a> Fix <code>cordova/run</code> failure when no <code>custom_rules.xml</code> available</li>
+  <li><code>defaults.xml</code>: Add <code>AndroidLaunchMode</code> preference</li>
+  <li>Add <code>JavaDoc</code> for <code>CordovaResourceApi</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6388">CB-6388</a> Handle binary data correctly in <code>LOAD_URL</code> bridge</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6048">CB-6048</a> Set <code>launchMode=singleTop</code> so tapping app icon does not always restart app</li>
+  <li>Remove incorrect usage of <code>AlertDialog.Builder.create</code></li>
+  <li>Catch uncaught exceptions in from plugins and turn them into error responses.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6047">CB-6047</a> Fix online sometimes getting in a bad state on page transitions.</li>
+  <li>Add another convenience overload for <code>CordovaResourceApi.copyResource</code></li>
+  <li>Update framework’s .classpath to what <strong>Eclipse</strong> wants it to be.</li>
+  <li>README.md: <code>android update</code> to <code>android-19</code>.</li>
+  <li>Fix NPE when POLLING bridge mode is used.</li>
+  <li>Updating NOTICE to include <em>Square</em> for <code>OkHttp</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5398">CB-5398</a> Apply <code>KitKat</code> content URI fix to all content URIs</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5398">CB-5398</a> Work-around for <code>KitKat</code> content: URLs not rendering in <code>&lt;img&gt;</code> tags</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5908">CB-5908</a> add splashscreen images to template</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5395">CB-5395</a> Make scheme and host (but not path) case-insensitive in whitelist</li>
+  <li>Ignore multiple <code>onPageFinished()</code> callbacks &amp; <code>onReceivedError</code> due to <code>stopLoading()</code></li>
+  <li>Removing <code>addJavascriptInterface</code> support from all <strong>Android</strong> versions lower than 4.2 due to security vulnerability</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-4984">CB-4984</a> Don’t create on <code>CordovaActivity</code> name</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5917">CB-5917</a> Add a <code>loadUrlIntoView</code> overload that doesn’t recreate plugins.</li>
+  <li>Use thread pool for load timeout.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5715">CB-5715</a> For CLI, hide <code>assets/www</code> and <code>res/xml/config.xml</code> by default</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5793">CB-5793</a> ant builds: Rename <code>AndroidManifest</code> during -post-build to avoid <strong>Eclipse</strong> detecting <code>ant-build/</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5889">CB-5889</a> Make update script find project name instead of using <code>null</code> for <code>CordovaLib</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5889">CB-5889</a> Add a message in the update script about needing to import <code>CordovaLib</code> when using an IDE.</li>
+</ul>
+
+<h2 id="whats-new-in-ios">What’s new in iOS</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6638">CB-6638</a> - Convert <code>CordovaLibTests</code> to <code>XCTests</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6579">CB-6579</a> - <code>CDVWebViewDelegateTests</code> are failing</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6580">CB-6580</a> - <code>CDVWhitelistTests</code> are failing</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6578">CB-6578</a> - Fix <code>CordovaLibTests</code> not building</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6553">CB-6553</a> added top-level <code>package.json</code> file</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6500">CB-6500</a> - Cordova requires <code>arm64</code> architecture.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6383">CB-6383</a> Fix <code>copy-www-build-step.sh</code> when user has macports installed</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6327">CB-6327</a> Allow ‘.’ in plugin feature names (and therefore callback ids)</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6287">CB-6287</a> - Add build script support for <code>arm64</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6340">CB-6340</a> - Adding rebroadcast capabilities to remote notification registration within <code>AppDelegate</code> (closes #94)</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6217">CB-6217</a> <strong>iOS</strong> simulator targets not consistent across scripts</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5286">CB-5286</a> - Fix warnings when compiled under <code>arm64</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-4863">CB-4863</a> - Drop <strong>iOS</strong> 5.0 support, and support <code>arm64</code>. New projects are built as a universal binary (64 and 32-bit), and require a minimum deployment target of iOS 6.0.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6149">CB-6149</a> - <code>AppDelegate</code> uses deprecated <code>handleOpenURL</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6150">CB-6150</a> - <code>objc_msgSend</code> causes <code>EXC_BAD_ACCESS</code> with plugins on <code>arm64</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5018">CB-5018</a> - <code>bin/create</code> on <strong>iOS</strong> should use <code>--arc</code> by default</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5943">CB-5943</a> - Update/remove obsolete items in <code>cordova-ios</code> repo</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5395">CB-5395</a> Make scheme and host (but not path) case-insensitive in whitelist</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5991">CB-5991</a> Fix <code>whitelist</code> path matching for trailing slashes</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5967">CB-5967</a> Fix <code>isTopLevelNavigation</code> not being set correctly in rare cases.</li>
+  <li>Validate that callback IDs are always well-formed</li>
+  <li>Removed obsolete <code>.gitmodules</code></li>
+  <li>Update <strong>Xcode</strong> <code>.pbxproj</code> files according to <strong>Xcode</strong> 5.1 recommendations</li>
+  <li>Added <code>NSLog</code> notification for beginning backup to <code>iCloud</code> (closes #96)</li>
+</ul>
+
+<h2 id="whats-new-in-windows-phone-7--8">What’s new in Windows Phone 7 &amp; 8</h2>
+
+<ul>
+  <li>Update release-notes, and state that <strong>WP7</strong> support is about to disappear</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6558">CB-6558</a> added <code>package.json</code> file for <strong>WP8</strong></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6450">CB-6450</a> added support for local <code>XHR.responseXML getter</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6341">CB-6341</a> don’t rely on <code>msbuild</code> being in the path.</li>
+  <li>applied Sergey’s SpecificVersion flag fix to the <strong>WP7</strong> template also <a href="https://issues.apache.org/jira/browse/CB-6103">CB-6103</a></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6103">CB-6103</a> <strong>WP8</strong> <code>CordovaDeploy</code> potential build issue</li>
+  <li>applied <a href="https://issues.apache.org/jira/browse/CB-6268">CB-6268</a> <code>backgroundcolor</code> to <code>WP7</code> also</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6268">CB-6268</a> <strong>WP8</strong>. Apply <code>BackgroundColor</code> from <code>config.xml</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5965">CB-5965</a> support set responseType, get response</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6299">CB-6299</a> Strip protocol and leading slashes from <code>XHRLOCAL URL</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6091">CB-6091</a> <strong>Windows</strong> Build fails if application path contains whitespace</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6041">CB-6041</a> <code>createTemplates</code> should install them for <code>VS-2013</code> as well</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5219">CB-5219</a> <code>weinre</code> disconnects when <code>history.replaceState</code> is used</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5951">CB-5951</a> Added <code>namespace</code> to <code>config.xml</code></li>
+  <li>Removed <strong>WP7</strong> template ref to non-existent file</li>
+</ul>
+
+<h2 id="whats-new-in-windows-8">What’s new in Windows 8</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6684">CB-6684</a> [3.5.0rc]<strong>Windows8</strong> Splash screen setting breaks the build</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6686">CB-6686</a> [3.5.0rc]<strong>Windows8</strong> Build  error if path contains whitespace</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6557">CB-6557</a> added <code>package.json</code> to <strong>Windows8</strong></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6309">CB-6309</a> <strong>Windows8</strong>. Add Splash Screen img support via <code>config.xml</code> preference, <a href="https://issues.apache.org/jira/browse/CB-6544">CB-6544</a> <code>SplashScreenBack</code></li>
+  <li>Fix for when <code>background-color</code> and/or <code>content-src </code>aren’t specified in <code>config.xml</code></li>
+  <li>Background color now applied to <strong>Windows8</strong> project config during build process.</li>
+  <li>Fix <code>build/deploy</code> errors when path to project contains spaces</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6435">CB-6435</a> <code>./VERSION</code> &amp; <code>/template/VERSION</code> updated</li>
+  <li>Modify execution policy restrictions removal logic. Using PS native cmdlet to remove restrictions.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6397">CB-6397</a> <strong>Windows8</strong> Use the latest version of <code>MSBuild Tools</code> installed to build the app</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6256">CB-6256</a> <a href="https://issues.apache.org/jira/browse/CB-6266">CB-6266</a> Add support for domain whitelist and start page settings to <strong>Windows8</strong></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-2970">CB-2970</a> <a href="https://issues.apache.org/jira/browse/CB-2953">CB-2953</a> log unsupported methods and exit with code 1</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-2978">CB-2978</a> <code>list-devices</code> not supported on <strong>Windows 8</strong></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6091">CB-6091</a> <strong>Windows</strong> Build fails if application path contains whitespace</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6083">CB-6083</a> <strong>Windows8</strong> Use registry to read <code>msbuild</code> tools path</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6042">CB-6042</a> <strong>Windows8</strong> <code>Cordova emulate</code> fails if no developer certificate is installed</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5951">CB-5951</a> Added <code>namespace</code> to <code>config.xml</code></li>
+  <li>Remove template file after create by name</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-4533">CB-4533</a> return error code 2 on fail, <a href="https://issues.apache.org/jira/browse/CB-5359">CB-5359</a> get tools version from the registry</li>
+</ul>
+
+<h2 id="whats-new-in-blackberry-10">What’s new in BlackBerry 10</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6554">CB-6554</a> updated <code>package.json</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6522">CB-6522</a> Disallow space in target name</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move config logic to its own module</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6398">CB-6398</a> Support additional commands in <code>blackberry10.json</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Switch to grunt as task runner</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> <code>chmod -x *.bat</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>scripts/lib</code> dir</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>utils.js</code> from bin to template</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>+x</code> from <code>.bat</code> files</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> create - use <code>shelljs</code> rather than custom copy function</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>create.js</code> to <code>lib</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Remove <code>check_reqs.js</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6440">CB-6440</a> Move <code>signing-utils</code> out of <code>bin</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6416">CB-6416</a> Ensure target dictionary exists in properties object</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6410">CB-6410</a> Allow deployment when debug token cannot be generated</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6409">CB-6409</a> Allow detection of devices which have not yet set password</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6346">CB-6346</a> Remove <code>npm</code> warning from <code>README.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6376">CB-6376</a> <code>backgroundColor</code> in <code>user.js</code> is missing quotes</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6346">CB-6346</a> - Add <code>node_modules</code> to source control</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6326">CB-6326</a> Fix inconsistency between manually added vs auto-detected emulators</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6326">CB-6326</a> (cordova-blackberry) <code>target-utils.js</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6303">CB-6303</a> Remove titles from non-content web views</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6303">CB-6303</a> Add <code>aria-hidden="true"</code> to controller webview body</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6241">CB-6241</a> Default to prompting for passwords (replace <code>--query</code> with <code>--no-query</code>)</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6222">CB-6222</a> Various updates for the <strong>BlackBerry 10</strong> documentation</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6058">CB-6058</a> - Options file removed from output bar. Now in build directory</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6021">CB-6021</a> Add <code>--release</code> to run command</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5723">CB-5723</a> Build script should accept <code>-l</code> param as it does <code>--loglevel</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6019">CB-6019</a> Supply default value of <code>--device</code> to the run script</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5660">CB-5660</a> use <code>enabledelayedexpansion</code> to handle )s in path</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5909">CB-5909</a> Fixed issue where <code>check-reqs</code> skipped checking logic on second pass-through</li>
+</ul>
+
+<h2 id="whats-new-in-firefox-os">What’s new in Firefox OS</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5816">CB-5816</a> <strong>Firefox OS</strong> - add build script</li>
+  <li>Remove unused elements from <code>defaults.xml</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6555">CB-6555</a> updated top level <code>package.json</code> file</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5416">CB-5416</a> Need to auto generate manifest.webapp with appropriate plugin permissions</li>
+</ul>
+
+<h2 id="whats-new-in-ubuntu-touch">What’s new in Ubuntu (touch)</h2>
+
+<ul>
+  <li>allow inter plugin communication</li>
+  <li>add <code>.editorconfig</code></li>
+  <li>check requirements before build</li>
+  <li><code>bin/build</code>: fixes for <code>--nobuild</code></li>
+  <li><code>bin/build</code>: specify framework instead of series for click <code>chroot</code></li>
+  <li><code>bin/build</code>: switch to async shelljs.exec</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6559">CB-6559</a> added top level <code>package.json</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+</ul>
+
+<h2 id="whats-new-in-amazon-fireos">What’s new in Amazon FireOS</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6644">CB-6644</a> Add a check for webview being null in template code. Added a check and some comments to guide devs.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6487">CB-6487</a> Fixed WebView not found in Chrome remote debugging</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6636">CB-6636</a> Need to destroy webview properly. Added <code>destroy()</code> call in webview’s <code>handleDestroy()</code> method.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6543">CB-6543</a> Fix <code>cordova/run</code> failure when no <code>custom_rules.xml</code> available</li>
+  <li>defaults.xml: Add <code>AndroidLaunchMode</code> preference</li>
+  <li>Add <code>JavaDoc</code> for <code>CordovaResourceApi</code></li>
+  <li>Updated log statement - <code>android=&gt;amazon-fireos</code>.</li>
+  <li>Added <strong>Amazon</strong> <code>xmlns</code> to project’s template <code>AndroidManifest.xml</code>.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6392">CB-6392</a> Adding <strong>amazon-fireos</strong> platform fails with not so good error reporting</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6556">CB-6556</a> added top level <code>package.json</code> file</li>
+  <li>Adding a safety check to prevent applications from calling init twice Changes to address thread safety concerns in <code>Cordova</code> plugin management</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6388">CB-6388</a> Handle binary data correctly in <code>LOAD_URL</code> bridge</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6048">CB-6048</a> Set <code>launchMode=singleTop</code> so tapping app icon does not always restart app</li>
+  <li>Fixing back button issue by utilizing <code>onBackPressed</code> instead of <code>onKeyUp</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5744">CB-5744</a> Unable to build Hello World application for Kindle Fire HDX tablet using <strong>Cordova</strong> 3.3.0</li>
+  <li>Added overloaded constructor for <code>CordovaWebView</code> with Bundle as parameter.</li>
+  <li>Catch uncaught exceptions in from plugins and turn them into error responses.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6047">CB-6047</a> Fix online sometimes getting in a bad state on page transitions.</li>
+  <li>Add another convenience overload for <code>CordovaResourceApi.copyResource</code></li>
+  <li>Update framework’s .classpath to what <strong>Eclipse</strong> wants it to be.</li>
+  <li>Updated <strong>Android</strong> target to <code>android-19</code>.</li>
+  <li>README.md: <code>android update</code> to <code>android-19</code>.</li>
+  <li>Fix NPE when POLLING bridge mode is used.</li>
+  <li>Updating NOTICE to include <code>Square</code> for <code>OkHttp</code></li>
+</ul>
+
+<h2 id="whats-new-in-cordova-cli">What’s new in Cordova-CLI</h2>
+
+<ul>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5941">CB-5941</a> Update link to <code>hooks-README.md</code> file from <code>README.md</code></li>
+  <li>Fix <code>cordova help</code> command</li>
+  <li>Fixing failing CLI tests by removing ‘experimental’ key</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6649">CB-6649</a> Removing experimental flag from positional arguments</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6648">CB-6648</a> Adding a flag for experimental features</li>
+  <li>Fix require paths to use <code>cordova-lib</code></li>
+  <li>Update <code>package.json</code> to use <code>cordova-lib</code></li>
+  <li>Split out <code>cordova-lib</code>: move <code>cordova-cli</code> files</li>
+  <li><strong>Windows8</strong> re-added <code>BOM</code> : <a href="https://issues.apache.org/jira/browse/CB-5421">CB-5421</a> Add <code>BOM</code> to all html, js, css files to ensure app can pass <strong>Windows</strong> Store Certification</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6491">CB-6491</a> add <code>CONTRIBUTING.md</code></li>
+  <li><code>android-parser</code>: Add <code>AndroidLaunchMode</code> preference</li>
+  <li>Fix <code>CLI</code> tests to work with <code>node</code> v0.11</li>
+  <li>Update version of jasmine-node. Fixes test warnings util.print with node 0.11</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-2606">CB-2606</a> <strong>Android</strong> icon - do not attempt copy to undefined path</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-2606">CB-2606</a> Icons support for <strong>iOS</strong>, <strong>Android</strong>, <strong>BB10</strong>, <strong>WP8</strong>, <strong>Win8</strong>, <strong>FxOS</strong></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6329">CB-6329</a> Delete unused <code>info-utils.js</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6329">CB-6329</a> improve <code>cordova info</code> command</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5847">CB-5847</a> <code>strictSSL</code> is no longer ignored</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6432">CB-6432</a> <code>pre_package</code> hook does not populate <code>%CORDOVA_PLATFORMS%</code></li>
+  <li>Revert “CB-6267 <strong>Windows8</strong>. Apply <code>BackgroundColor</code> from <code>config.xml</code>”</li>
+  <li>Recreate “platforms” dir if it was deleted.</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-5093">CB-5093</a> Add <code>versionCode</code> and <code>CFBundleVersion</code> during prepare</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6312">CB-6312</a> Use <code>landscape</code> instead of <code>userLandscape</code> in <code>AndroidManifest.xml</code></li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6421">CB-6421</a> Move tests from <code>e2e</code> to <code>spec</code> - cli test</li>
+  <li><a href="https://issues.apache.org/jira/browse/CB-6377">CB-6377</a> <code>superspawn</code>: always wrap non <code>.exe</code> with spaces to <code>cmd</code> with /s /c</li>
+</ul>
+
+<h2 id="whats-new-in-cordova-plugman">What’s new in Cordova-Plugman</h2>
+
+<ul>
+  <li>Update <code>plugman cli</code> to use <code>cordova-lib</code></li>
+  <li>Split out <code>cordova-lib</code>: move <code>cordova-plugman</code> files</li>
+</ul>
+
+<h2 id="plugin-versions-tested-with-this-release">Plugin versions tested with this release</h2>
+
+<ul>
+  <li>cordova-plugin-battery-status: 0.2.8</li>
+  <li>cordova-plugin-camera: 0.2.9</li>
+  <li>cordova-plugin-console: 0.2.8</li>
+  <li>cordova-plugin-contacts: 0.2.10</li>
+  <li>cordova-plugin-device: 0.2.9</li>
+  <li>cordova-plugin-device-motion: 0.2.7</li>
+  <li>cordova-plugin-device-orientation: 0.3.6</li>
+  <li>cordova-plugin-dialogs: 0.2.6</li>
+  <li>cordova-plugin-file: 1.1.0</li>
+  <li>cordova-plugin-file-transfer: 0.4.3</li>
+  <li>cordova-plugin-geolocation: 0.3.7</li>
+  <li>cordova-plugin-globalization: 0.2.7</li>
+  <li>cordova-plugin-inappbrowser: 0.4.0</li>
+  <li>cordova-plugin-media: 0.2.10</li>
+  <li>cordova-plugin-media-capture: 0.3.0</li>
+  <li>cordova-plugin-network-information: 0.2.8</li>
+  <li>cordova-plugin-splashscreen: 0.3.0</li>
+  <li>cordova-plugin-statusbar: 0.1.3</li>
+  <li>cordova-plugin-vibration: 0.3.8</li>
 </ul>
 
     </div>
 </div>
 
-
-
     <a class="scroll-point" name="links"></a>
 <hr/>
 
@@ -621,7 +410,6 @@ cordova platform update android</code></
     </div>
 </div>
 
-
     <hr/>
 <div id="footer">
     <p>Copyright © 2012, 2013 The Apache Software Foundation, Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.<br/>
@@ -630,6 +418,15 @@ cordova platform update android</code></
     <a class="closing" href="#top"></a>
 </div>
 
+    <script>
+    (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+    m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+
+    ga('create', 'UA-64283057-3', 'auto');
+    ga('send', 'pageview');
+</script>
 
 </body>
 </html>

Modified: cordova/site/public/announcements/2014/08/04/android-351.html
URL: http://svn.apache.org/viewvc/cordova/site/public/announcements/2014/08/04/android-351.html?rev=1692041&r1=1692040&r2=1692041&view=diff
==============================================================================
--- cordova/site/public/announcements/2014/08/04/android-351.html (original)
+++ cordova/site/public/announcements/2014/08/04/android-351.html Tue Jul 21 01:00:00 2015
@@ -19,20 +19,9 @@
     <!-- Cordova CSS -->
     <link rel="stylesheet" type="text/css" href="//cordova.apache.org/css/master.css">
     <script src="//cordova.apache.org/js/smooth.pack.js" type="text/javascript"></script>
-    <script type="text/javascript">
-      var _gaq = _gaq || [];
-      _gaq.push(['_setAccount', 'UA-94271-30']);
-      _gaq.push(['_trackPageview']);
-      (function() {
-        var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
-        ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
-        var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
-      })();
-    </script>
 </head>
 
 <body>
-
     <a class="scroll-point pt-top" name="top">
 </a>
 <div id="header">
@@ -63,100 +52,175 @@
 </div> <!-- /header -->
 <div class="header-placeholder"></div>
 
-
-        <div class="site">
+    <div class="site">
     <h2>Apache Cordova Android 3.5.1</h2>
     <div class="meta">Posted by: <a href="https://twitter.com/MarcelKinard">Marcel Kinard</a></div>
     <p class="meta">04 Aug 2014</p>
     <div class="post">
-    
-<p><strong>Updated: 2014-08-06</strong> (The text of CVE-2014-3502 was changed after this post was released, to better explain the cope of the issue and the ways to mitigate the problem)</p>
+    <p><strong>Updated: 2014-08-06</strong>
+(The text of CVE-2014-3502 was changed after this post was released, to better explain the cope of the issue and the ways to mitigate the problem)</p>
 
 <p>Security issues were discovered in the Android platform of Cordova. We are releasing version 3.5.1 of Cordova Android to address these security issues. We recommend that all Android applications built using Cordova be upgraded to use version 3.5.1 of Cordova Android. Other Cordova platforms such as iOS are unaffected, and do not have an update.</p>
 
 <p>When using the Cordova CLI, the command to use 3.5.1 of Cordova Android is:</p>
 
-<pre><code>cordova platform add android@3.5.1 --usenpm</code></pre>
+<pre><code>cordova platform add android@3.5.1 --usenpm
+</code></pre>
 
 <p>The security issues are CVE-2014-3500, CVE-2014-3501, and CVE-2014-3502.</p>
 
 <p>For your convenience, the text of these CVEs is included here.</p>
-<!--more--><hr />
+
+<!--more-->
+
+<hr />
+
 <p>CVE-2014-3500: Cordova cross-application scripting via Android intent URLs</p>
 
 <p>Severity: High</p>
 
-<p>Vendor: The Apache Software Foundation</p>
+<p>Vendor:
+The Apache Software Foundation</p>
 
-<p>Versions Affected: Cordova Android versions up to 3.5.0</p>
+<p>Versions Affected:
+Cordova Android versions up to 3.5.0</p>
 
-<p>Description: Android applications built with the Cordova framework can be launched through a special intent URL. A specially-crafted URL could cause the Cordova-based application to start up with a different start page than the developer intended, including other HTML content stored on the Android device. This has been the case in all released versions of Cordova up to 3.5.0, and has been fixed in the latest release (3.5.1). We recommend affected projects update their applications to the latest release.</p>
+<p>Description:
+Android applications built with the Cordova framework can be launched through
+a special intent URL. A specially-crafted URL could cause the Cordova-based
+application to start up with a different start page than the developer
+intended, including other HTML content stored on the Android device. This has
+been the case in all released versions of Cordova up to  3.5.0, and has been
+fixed in the latest release (3.5.1). We recommend affected projects update
+their applications to the latest release.</p>
+
+<p>Upgrade path:
+Developers who are concerned about this should rebuild their applications with
+Cordova Android 3.5.1.</p>
 
-<p>Upgrade path: Developers who are concerned about this should rebuild their applications with Cordova Android 3.5.1.</p>
+<p>Credit:
+This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 
-<p>Credit: This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 <hr />
+
 <p>CVE-2014-3501: Cordova whitelist bypass for non-HTTP URLs</p>
 
 <p>Severity: Medium</p>
 
-<p>Vendor: The Apache Software Foundation</p>
-
-<p>Versions Affected: All released Cordova Android versions</p>
-
-<p>Description: Android applications built with the Cordova framework use a WebView component to display content. Cordova applications can specify a whitelist of URLs which the application will be allowed to display, or to communicate with via XMLHttpRequest. This whitelist, however, is not used by the WebView component when it is directed via JavaScript to communicate over non-http channels.</p>
-
-<p>Specifically, it can be possible to open a WebSocket connection from the application JavaScript which will connect to any reachable server on the Internet. If an attacker is able to execute arbitrary JavaScript within the application, then that attacker can cause a connection to be opened to any server, bypassing the HTTP whitelist.</p>
+<p>Vendor:
+The Apache Software Foundation</p>
 
-<p>This is a limitation of the hybrid app architecture on Android in general, and not specific to Apache Cordova.</p>
+<p>Versions Affected:
+All released Cordova Android versions</p>
 
-<p>It is possible to mitigate this attack vector by adding a CSP meta tag to all HTML pages in the application, to allow connections only to trusted sources. App developers should also upgrade to Cordova Android 3.5.1, to reduce the risk of XAS attacks against their applications, which could then use this mechanism to reach unintended servers. See CVE-2014-3500 for more information on a possible XAS vulnerability.</p>
+<p>Description:
+Android applications built with the Cordova framework use a WebView component
+to display content. Cordova applications can specify a whitelist of URLs which
+the application will be allowed to display, or to communicate with via
+XMLHttpRequest. This whitelist, however, is not used by the WebView component
+when it is directed via JavaScript to communicate over non-http channels.</p>
+
+<p>Specifically, it can be possible to open a WebSocket connection from the
+application JavaScript which will connect to any reachable server on the
+Internet. If an attacker is able to execute arbitrary JavaScript within the
+application, then that attacker can cause a connection to be opened to any
+server, bypassing the HTTP whitelist.</p>
+
+<p>This is a limitation of the hybrid app architecture on Android in general, and
+not specific to Apache Cordova.</p>
+
+<p>It is possible to mitigate this attack vector by adding a CSP meta tag to all
+HTML pages in the application, to allow connections only to trusted sources.
+App developers should also upgrade to Cordova Android 3.5.1, to reduce the risk
+of XAS attacks against their applications, which could then use this mechanism
+to reach unintended servers. See CVE-2014-3500 for more information on a
+possible XAS vulnerability.</p>
+
+<p>Upgrade path:
+Developers who are concerned about this should rebuild their applications with
+Cordova Android 3.5.1, and consider adding CSP meta tags to their application
+HTML.</p>
 
-<p>Upgrade path: Developers who are concerned about this should rebuild their applications with Cordova Android 3.5.1, and consider adding CSP meta tags to their application HTML.</p>
+<p>Credit:
+This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 
-<p>Credit: This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 <hr />
-<p>CVE-2014-3502: Cordova apps can potentially leak data to other apps via URL loading</p>
 
-<p>Severity: Medium</p>
-
-<p>Vendor: The Apache Software Foundation</p>
-
-<p>Versions Affected: Cordova Android versions up to 3.5.0</p>
+<p>CVE-2014-3502: Cordova apps can potentially leak data to other apps via URL
+loading</p>
 
-<p>Description: Android applications built with the Cordova framework can launch other applications through the use of anchor tags, or by redirecting the webview to an Android intent URL. An attacker who can manipulate the HTML content of a Cordova application can create links which open other applications and send arbitrary data to those applications. An attacker who can run arbitrary JavaScript code within the context of the Cordova application can also set the document location to such a URL. By using this in concert with a second, vulnerable application, an attacker might be able to use this method to send data from the Cordova application to the network.</p>
+<p>Severity: Medium</p>
 
-<p>The latest release of Cordova Android takes steps to block explicit Android intent urls, so that they can no longer be used to start arbitrary applications on the device.</p>
+<p>Vendor:
+The Apache Software Foundation</p>
 
-<p>Implicit intents, including URLs with schemes such as “tel”, “geo”, and “sms” can still be used to open external applications by default, but this behaviour can be overridden by plugins.</p>
+<p>Versions Affected:
+Cordova Android versions up to 3.5.0</p>
 
-<p>Upgrade path: Developers who are concerned about this should rebuild their applications with Cordova Android 3.5.1.</p>
+<p>Description:
+Android applications built with the Cordova framework can launch other
+applications through the use of anchor tags, or by redirecting the webview to
+an Android intent URL. An attacker who can manipulate the HTML content of a
+Cordova application can create links which open other applications and send
+arbitrary data to those applications. An attacker who can run arbitrary
+JavaScript code within the context of the Cordova application can also set the
+document location to such a URL. By using this in concert with a second,
+vulnerable application, an attacker might be able to use this method to send
+data from the Cordova application to the network.</p>
+
+<p>The latest release of Cordova Android takes steps to block explicit Android
+intent urls, so that they can no longer be used to start arbitrary applications
+on the device.</p>
+
+<p>Implicit intents, including URLs with schemes such as “tel”, “geo”, and “sms”
+can still be used to open external applications by default, but this behaviour
+can be overridden by plugins.</p>
+
+<p>Upgrade path:
+Developers who are concerned about this should rebuild their applications with
+Cordova Android 3.5.1.</p>
 
-<p>Credit: This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
+<p>Credit:
+This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 
 <p>(This notice originally read as follows:)</p>
 
-<p>CVE-2014-3502: Cordova apps can potentially leak data to other apps via Android intent URLs</p>
+<p>CVE-2014-3502: Cordova apps can potentially leak data to other apps via Android
+intent URLs</p>
 
 <p>Severity: Medium</p>
 
-<p>Vendor: The Apache Software Foundation</p>
-
-<p>Versions Affected: Cordova Android versions up to 3.5.0</p>
+<p>Vendor:
+The Apache Software Foundation</p>
 
-<p>Description: Android applications built with the Cordova framework can launch other applications through the use of anchor tags, or by redirecting the webview to an Android intent URL. An attacker who can manipulate the HTML content of a Cordova application can create links which open other applications and send arbitrary data to those applications. An attacker who can run arbitrary JavaScript code within the context of the Cordova application can also set the document location to such a URL. By using this in concert with a second, vulnerable application, an attacker might be able to use this method to send data from the Cordova application to the network.</p>
+<p>Versions Affected:
+Cordova Android versions up to 3.5.0</p>
 
-<p>The latest release of Cordova Android takes steps to block explicit Android intent urls, so that they can no longer be used to start arbitrary applications on the device.</p>
+<p>Description:
+Android applications built with the Cordova framework can launch other
+applications through the use of anchor tags, or by redirecting the webview to
+an Android intent URL. An attacker who can manipulate the HTML content of a
+Cordova application can create links which open other applications and send
+arbitrary data to those applications. An attacker who can run arbitrary
+JavaScript code within the context of the Cordova application can also set the
+document location to such a URL. By using this in concert with a second,
+vulnerable application, an attacker might be able to use this method to send
+data from the Cordova application to the network.</p>
+
+<p>The latest release of Cordova Android takes steps to block explicit Android
+intent urls, so that they can no longer be used to start arbitrary applications
+on the device.</p>
+
+<p>Upgrade path:
+Developers who are concerned about this should rebuild their applications with
+Cordova Android 3.5.1.</p>
 
-<p>Upgrade path: Developers who are concerned about this should rebuild their applications with Cordova Android 3.5.1.</p>
-
-<p>Credit: This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
+<p>Credit:
+This issue was discovered by David Kaplan and Roee Hay of IBM Security Systems.</p>
 
     </div>
 </div>
 
-
-
     <a class="scroll-point" name="links"></a>
 <hr/>
 
@@ -223,7 +287,6 @@
     </div>
 </div>
 
-
     <hr/>
 <div id="footer">
     <p>Copyright © 2012, 2013 The Apache Software Foundation, Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.<br/>
@@ -232,6 +295,15 @@
     <a class="closing" href="#top"></a>
 </div>
 
+    <script>
+    (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+    m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+
+    ga('create', 'UA-64283057-3', 'auto');
+    ga('send', 'pageview');
+</script>
 
 </body>
 </html>

Modified: cordova/site/public/announcements/2014/08/06/android-351-update.html
URL: http://svn.apache.org/viewvc/cordova/site/public/announcements/2014/08/06/android-351-update.html?rev=1692041&r1=1692040&r2=1692041&view=diff
==============================================================================
--- cordova/site/public/announcements/2014/08/06/android-351-update.html (original)
+++ cordova/site/public/announcements/2014/08/06/android-351-update.html Tue Jul 21 01:00:00 2015
@@ -19,20 +19,9 @@
     <!-- Cordova CSS -->
     <link rel="stylesheet" type="text/css" href="//cordova.apache.org/css/master.css">
     <script src="//cordova.apache.org/js/smooth.pack.js" type="text/javascript"></script>
-    <script type="text/javascript">
-      var _gaq = _gaq || [];
-      _gaq.push(['_setAccount', 'UA-94271-30']);
-      _gaq.push(['_trackPageview']);
-      (function() {
-        var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
-        ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
-        var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
-      })();
-    </script>
 </head>
 
 <body>
-
     <a class="scroll-point pt-top" name="top">
 </a>
 <div id="header">
@@ -63,24 +52,25 @@
 </div> <!-- /header -->
 <div class="header-placeholder"></div>
 
-
-        <div class="site">
+    <div class="site">
     <h2>Apache Cordova Android 3.5.1 Update</h2>
     <div class="meta">Posted by: <a href="https://twitter.com/iclelland">Ian Clelland</a></div>
     <p class="meta">06 Aug 2014</p>
     <div class="post">
-    
-<p>On Monday, we released Cordova Android 3.5.1, to address a couple of security issues. Afterwards, talking with the original researchers, we realized that the text of the security announcement that went out wasn’t quite right, so we’ve amended it.</p>
+    <p>On Monday, we released Cordova Android 3.5.1, to address a couple of security issues. Afterwards, talking with the original researchers, we realized that the text of the security announcement that went out wasn’t quite right, so we’ve amended it.</p>
 
 <p>You can read the amended blog post <a href="http://cordova.apache.org/announcements/2014/08/04/android-351.html">here</a>.</p>
 
 <p>The issue in CVE-2014-3502 is that Cordova applications would, by default, pass any URLs that they couldn’t load to the Android intent system for handling. This lets developers construct URLs that open email applications, maps, or send SMS messages, or even open web pages in the system browser, but it also allowed malicious URLs that could potentially open other applications on the device. This meant that if someone could execute their own JavaScript in your application, that they could use other applications on the device to “phone home” with the user’s data. This is why we are recommending that all Android developers upgrade to Cordova 3.5.1.</p>
+
 <!--more-->
+
 <p>In order not to break existing applications, Cordova 3.5.1 disallows clearly malicious URLs, but will still open links like <code>sms:</code>, <code>mailto:</code>, or <code>geo:</code> in their default applications. (It is, after all, a useful feature, and there are many published applications which rely on that behaviour.) If you want to restrict that even further, you can use Cordova plugins to customize which URLs can be loaded, and which URLs will be blocked completely.</p>
 
 <p>As a very simple example of this, I have published a sample plugin which blocks all external applications from loading. To use it, install it like</p>
 
-<pre><code>cordova plugin add net.iclelland.external-app-block</code></pre>
+<pre><code>cordova plugin add net.iclelland.external-app-block
+</code></pre>
 
 <p>or feel free to clone it from <a href="https://github.com/clelland/cordova-plugin-external-app-block">GitHub</a> and tweak it to suit your needs.</p>
 
@@ -89,8 +79,6 @@
     </div>
 </div>
 
-
-
     <a class="scroll-point" name="links"></a>
 <hr/>
 
@@ -157,7 +145,6 @@
     </div>
 </div>
 
-
     <hr/>
 <div id="footer">
     <p>Copyright © 2012, 2013 The Apache Software Foundation, Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.<br/>
@@ -166,6 +153,15 @@
     <a class="closing" href="#top"></a>
 </div>
 
+    <script>
+    (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+    m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+
+    ga('create', 'UA-64283057-3', 'auto');
+    ga('send', 'pageview');
+</script>
 
 </body>
 </html>



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cordova.apache.org
For additional commands, e-mail: commits-help@cordova.apache.org


Mime
View raw message