Re: JSPWiki 2.4.103 released

Murray Altheim <[email protected]>
Newsgroups gmane.comp.java.jspwiki.user
Message-ID <[email protected]>
Janne Jalkanen wrote:
> Hi ho folks!
> 
> I have just released 2.4.103, which is a security update to 2.4.102.  It 
> fixes an cross site scripting (XSS) issue, and it is strongly 
> recommended that everybody currently running 2.4.102 upgrades to this 
> version.  Thanks to Igor Minar for finding this.
> 
> JSPWiki 2.4.103 is immediately available from 
> http://www.jspwiki.org/wiki/JSPWikiDownload
> 
> This bug is also present in 2.5.105 and earlier, and it is fixed in 
> 2.5.106 (now available in CVS).

Hi Janne,

Is this a plug-and-play replacement for those running JSPWiki 2.4.102,
i.e., can we just drop the new jar file in or do we need to make changes
to the installed JSPs and/or templates?

Thanks,

Murray

...........................................................................
Murray Altheim <murray07 at altheim.com>                           ===  = =
http://www.altheim.com/murray/                                     = =  ===
SGML Grease Monkey, Banjo Player, Wantanabe Zen Monk               = =  = =

       Boundless wind and moon - the eye within eyes,
       Inexhaustible heaven and earth - the light beyond light,
       The willow dark, the flower bright - ten thousand houses,
       Knock at any door - there's one who will respond.
                                       -- The Blue Cliff Record
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.