Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove YUI menu component for CVE-2010-4710 #3972

avernet opened this issue Mar 7, 2019 · 0 comments


1 participant
Copy link

commented Mar 7, 2019

Also remove the deprecated and broken fr:select1-button XBL component, which uses and includes the YUI menu.

Also see: CVE-2010-4710

+1 from customer

@avernet avernet self-assigned this Mar 7, 2019

@avernet avernet added this to To do in Orbeon Forms 2018.2.3 via automation Mar 7, 2019

@avernet avernet closed this in dd8975b Mar 21, 2019

avernet added a commit that referenced this issue Mar 21, 2019

Orbeon Forms 2018.2.3 automation moved this from To do to Done Mar 21, 2019

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.