http://redmine.emweb.be/http://redmine.emweb.be/favicon.ico?16934085252013-04-15T08:58:36ZRedmineWt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=52052013-04-15T08:58:36ZWim Dumonwim@emweb.be
<ul><li><strong>Assignee</strong> set to <i>Koen Deforche</i></li></ul> Wt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=52102013-04-15T19:10:24ZKoen Deforchekoen@emweb.be
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li><li><strong>Target version</strong> changed from <i>3.3.0</i> to <i>3.3.1</i></li></ul><p>Hey Pau,</p>
<p>Apparently ony the JavaScript got updated in 2.2.0. Feel free to backport this to 3.3.0 for debian if you think it's an issue (but I think not ?).</p>
<p>Regards,<br><br>
koen</p>
Wt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=52112013-04-15T19:57:36ZPau Garcia i Quilespgquiles@elpauer.org
<ul></ul><p>Koen,</p>
<p>The Flash has also been updated since jPlayer 2.0.x, which is what Wt 3.3.0 included. You must update the JavaScript, the Flash and the themes.</p>
<p>Also, 2.2.0 is not the right version to upgrade to. You need at least 2.2.24, which includes the security fixes. The only way to get that version is GitHub (I've been trying to convince the jPlayer developer to do proper releases for minor versions <del>tarballs, branches and tags</del> but it's going to take a bit of time)</p>
<p>Get the JavaScript and the Flash from:<br><br>
<a href="https://github.com/happyworm/jPlayer" class="external">https://github.com/happyworm/jPlayer</a></p>
<p>And the themes from the zip files (2.2.0)<br><br>
<a href="http://jplayer.org/download/" class="external">http://jplayer.org/download/</a></p>
<p>BTW, jPlayer requires jQuery 1.4.2, you are still shipping 1.4.1pre. The differences are probably small but it might be worth keeping an eye on that.</p>
Wt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=52192013-04-16T19:52:35ZKoen Deforchekoen@emweb.be
<ul><li><strong>Status</strong> changed from <i>Resolved</i> to <i>InProgress</i></li></ul> Wt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=52302013-04-18T18:07:20ZKoen Deforchekoen@emweb.be
<ul><li><strong>Status</strong> changed from <i>InProgress</i> to <i>Resolved</i></li></ul><p>Hey Pau,</p>
<p>I've imported version 2.2.24 now, thanks.</p>
<p>Regards,<br><br>
koen</p>
Wt - Bug #1839: Cross-site scripting in jPlayerhttp://redmine.emweb.be/issues/1839?journal_id=63012013-08-20T21:28:08ZKoen Deforchekoen@emweb.be
<ul><li><strong>Status</strong> changed from <i>Resolved</i> to <i>Closed</i></li></ul>