Subject: CVS commit: pkgsrc/www
From: Takahiro Kambe
Date: 2011-10-10 18:33:00
Message id: 20111010163300.262C5175DD@cvs.netbsd.org

Log Message:
Update contao210 package to 2.10.2.

It is really fix the XSS problem.

Version 2.10.2 (2011-10-10)
---------------------------
- Updated: updated TinyMCE to version 3.4.6
- Fixed: do not remove slashes just because get_magic_quotes_gpc() exists
- Fixed: CSS units were not always applied when used with global variables
  (#3464)
- Fixed: the task deadline field did not show the date picker (#3351)
- Fixed: do not return empty lines in the compileDefinition hook (#3440)
- Fixed: the TinyMCE spellchecker did not work anymore (#3487)
- Fixed: the regexp for validating phone numbers accepted invalid values
  (#3493)
- Fixed: added the new HTML5 elements to the valid TinyMCE tags (#3479)
- Fixed: the style sheet generator did not support absolute URLs (#3512)
- Fixed: fixed a potential XSS vulnerability (thanks to sschurtz)
- Fixed a few minor issues

Files:
RevisionActionfile
1.4modifypkgsrc/www/contao210/Makefile
1.4modifypkgsrc/www/contao210/distinfo
1.1removepkgsrc/www/contao210/patches/patch-system_modules_frontend_Frontend.php