Path to this page:
Subject: CVS commit: [pkgsrc-2011Q3] pkgsrc/www
From: Matthias Scheler
Date: 2011-10-10 20:05:35
Message id: 20111010180535.C0A5D175DD@cvs.netbsd.org
Log Message:
Pullup ticket #3552 - requested by taca
www/contao210: security update
Revisions pulled up:
- www/contao/Makefile.common 1.4
- www/contao210/Makefile 1.4
- www/contao210/distinfo 1.4
- www/contao210/patches/patch-system_modules_frontend_Frontend.php deleted
---
Module Name: pkgsrc
Committed By: taca
Date: Mon Oct 10 16:33:00 UTC 2011
Modified Files:
pkgsrc/www/contao: Makefile.common
pkgsrc/www/contao210: Makefile distinfo
Removed Files:
pkgsrc/www/contao210/patches:
patch-system_modules_frontend_Frontend.php
Log Message:
Update contao210 package to 2.10.2.
It is really fix the XSS problem.
Version 2.10.2 (2011-10-10)
---------------------------
- Updated: updated TinyMCE to version 3.4.6
- Fixed: do not remove slashes just because get_magic_quotes_gpc() exists
- Fixed: CSS units were not always applied when used with global variables
(#3464)
- Fixed: the task deadline field did not show the date picker (#3351)
- Fixed: do not return empty lines in the compileDefinition hook (#3440)
- Fixed: the TinyMCE spellchecker did not work anymore (#3487)
- Fixed: the regexp for validating phone numbers accepted invalid values
(#3493)
- Fixed: added the new HTML5 elements to the valid TinyMCE tags (#3479)
- Fixed: the style sheet generator did not support absolute URLs (#3512)
- Fixed: fixed a potential XSS vulnerability (thanks to sschurtz)
- Fixed a few minor issues
Files: