cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jesse <purplecabb...@gmail.com>
Subject Re: Review: Tools Release blog post
Date Mon, 10 Nov 2014 19:01:31 GMT
This was a huge security hole fix that should be mentioned most likely. 

https://github.com/apache/cordova-lib/commit/281aee737dbe5143c9cb5957359ed5df6298a154

This landed quietly, but ultimately tooling released before this commit could read private
user data, copy it to the project folder and upload it with hooks, or install anything anywhere
... probably worth a mention. 

> On Nov 10, 2014, at 10:17 AM, Josh Soref <jsoref@blackberry.com> wrote:
> 
> I only did the PR there because that's what I saw advertised.
> 
> I don't really care where it is done :)
> 
>> On 11/10/14, 1:00 PM, "Marcel Kinard" <cmarcelk@gmail.com> wrote:
>> 
>> https://github.com/kamrik/apache-blog-posts/pull/2
>> 
>> BTW, is there a reason to do the work on kamrik/master instead of
>> origin/topicBranch or origin/master? I think I have content from
>> Parashuram that you don't.
>> 
>>> On Nov 10, 2014, at 11:31 AM, Josh Soref <jsoref@blackberry.com> wrote:
>>> 
>>> To be fair, if you missed it, others will too, which argues that it
>>> should
>>> be reorganized.
>>> 
>>> I've done a PR for the other bits, but someone should consider this
>>> point.
>>> 
>>>> On 11/10/14, 11:27 AM, "Marcel Kinard" <cmarcelk@gmail.com> wrote:
>>>> 
>>>> Ah, missed that.
>>>> 
>>>> On Nov 10, 2014, at 11:20 AM, Mark Koudritsky <kamrik@google.com>
>>>> wrote:
>>>> 
>>>>> The two items under "Platform updates" are already links to those two
>>>>> posts.
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@cordova.apache.org
> For additional commands, e-mail: dev-help@cordova.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@cordova.apache.org
For additional commands, e-mail: dev-help@cordova.apache.org


Mime
View raw message