Subject: CVS commit: [pkgsrc-2011Q3] pkgsrc/www
From: Matthias Scheler
Date: 2011-10-10 20:05:35
Message id: 20111010180535.C0A5D175DD@cvs.netbsd.org

Log Message:
Pullup ticket #3552 - requested by taca
www/contao210: security update

Revisions pulled up:
- www/contao/Makefile.common                                    1.4
- www/contao210/Makefile                                        1.4
- www/contao210/distinfo                                        1.4
- www/contao210/patches/patch-system_modules_frontend_Frontend.php deleted

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Mon Oct 10 16:33:00 UTC 2011

   Modified Files:
   	pkgsrc/www/contao: Makefile.common
   	pkgsrc/www/contao210: Makefile distinfo
   Removed Files:
   	pkgsrc/www/contao210/patches:
   	    patch-system_modules_frontend_Frontend.php

   Log Message:
   Update contao210 package to 2.10.2.

   It is really fix the XSS problem.

   Version 2.10.2 (2011-10-10)
   ---------------------------
   - Updated: updated TinyMCE to version 3.4.6
   - Fixed: do not remove slashes just because get_magic_quotes_gpc() exists
   - Fixed: CSS units were not always applied when used with global variables
     (#3464)
   - Fixed: the task deadline field did not show the date picker (#3351)
   - Fixed: do not return empty lines in the compileDefinition hook (#3440)
   - Fixed: the TinyMCE spellchecker did not work anymore (#3487)
   - Fixed: the regexp for validating phone numbers accepted invalid values
     (#3493)
   - Fixed: added the new HTML5 elements to the valid TinyMCE tags (#3479)
   - Fixed: the style sheet generator did not support absolute URLs (#3512)
   - Fixed: fixed a potential XSS vulnerability (thanks to sschurtz)
   - Fixed a few minor issues

Files:
RevisionActionfile
1.2.2.2modifypkgsrc/www/contao210/Makefile
1.2.2.2modifypkgsrc/www/contao210/distinfo
1.1.2.2removepkgsrc/www/contao210/patches/patch-system_modules_frontend_Frontend.php