Opened 7 years ago

Closed 7 years ago

#5951 closed Bug (fixed)

Security problems due to the use of UniversalXPConnect

Reported by: Alfonso Martínez de Lizarrondo Owned by: Alfonso Martínez de Lizarrondo
Priority: Normal Milestone: CKEditor 3.4
Component: General Version: 3.1
Keywords: Review+ Cc:

Description

Two people have reported problems with their security suites due to the use of UniversalXPConnect introduced in #4469 http://cksource.com/forums/viewtopic.php?f=11&t=19393 http://cksource.com/forums/viewtopic.php?f=11&t=18514

As very few people might know about that option and even fewer of them would bother to change their configuration, I think that it will be better to remove that code because there might be more people that just see that CKEditor fails but don't know the reason and just give up before searching for help or reporting the problem.

Attachments (1)

5951.patch (1.2 KB) - added by Alfonso Martínez de Lizarrondo 7 years ago.
Proposed patch

Download all attachments as: .zip

Change History (3)

Changed 7 years ago by Alfonso Martínez de Lizarrondo

Attachment: 5951.patch added

Proposed patch

comment:1 Changed 7 years ago by Frederico Caldeira Knabben

Keywords: Review+ added; Review? removed

comment:2 Changed 7 years ago by Alfonso Martínez de Lizarrondo

Resolution: fixed
Status: newclosed

Fixed with [5680]

Note: See TracTickets for help on using tickets.
© 2003 – 2017 CKSource – Frederico Knabben. All rights reserved. | Terms of use | Privacy policy