[TYPO3-core] Poll for 4.1.3
Michael Stucki
michael at typo3.org
Mon Oct 15 13:36:17 CEST 2007
Hi Ingmar,
although I would like to see this in 4.1.3 as well, I have to agree with the
reasons mentioned by Benni and Dmitry.
Since 4.2 is out soon(!) it might not be a big issue to wait for it.
I will let the security team know about that. If they do not agree, they
should discuss this in common on the dev list (remember: no discussions
here, please!)
- michael
Benjamin Mack wrote:
> Hi,
>
> as much as I see how important the RemoveXSS library could be, I agree
> that this should go in 4.2 (which will be released soon anyway).
>
> greetings,
> benni.
> -SDG-
>
> www.xnos.de // www.xnos.org
>
>
> Dmitry Dulepov [typo3] wrote:
>> Ingmar Schlecht wrote:
>>> - Stucki wants to have the RemoveXSS library committed until then
>>
>> We cannot commit it to 4.1.3 because it is a new feature. If we ignore
>> the rule once, we will do it again and again.
>>
--
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/
More information about the TYPO3-team-core
mailing list