[TYPO3-core] Poll for 4.1.3

Michael Stucki michael at typo3.org
Mon Oct 15 13:36:17 CEST 2007


Hi Ingmar,

although I would like to see this in 4.1.3 as well, I have to agree with the
reasons mentioned by Benni and Dmitry.

Since 4.2 is out soon(!) it might not be a big issue to wait for it.
I will let the security team know about that. If they do not agree, they
should discuss this in common on the dev list (remember: no discussions
here, please!)

- michael

Benjamin Mack wrote:

> Hi,
> 
> as much as I see how important the RemoveXSS library could be, I agree
> that this should go in 4.2 (which will be released soon anyway).
> 
> greetings,
> benni.
> -SDG-
> 
> www.xnos.de // www.xnos.org
> 
> 
> Dmitry Dulepov [typo3] wrote:
>> Ingmar Schlecht wrote:
>>>   - Stucki wants to have the RemoveXSS library committed until then
>> 
>> We cannot commit it to 4.1.3 because it is a new feature. If we ignore
>> the rule once, we will do it again and again.
>>

-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/


More information about the TYPO3-team-core mailing list