Tapestry is a Java component-based web framework that features high
productivity, great code reuse, robust deployment, and great performance.

We've elected Massimo Lusetti to the Tapestry PMC.

Work continues in the master branch on a significant re-engineering of
Tapestry's client-side JavaScript support.

We've released three bug fixes releases (5.3.4 through 5.3.6); this has been
significantly easier to manage since the move from Subversion to Git.

We've received an security vulnerability report from the MATTA
organization. After a bit of a false start, we've had ongong discussions with
them. Primarily, there is a need for for HMAC (hash-based message
authentication) when Tapestry stores serialized Java objects on the
client. This has been addressed as part of the 5.3.6 release.

Further security work will continue later, with support for detecting
cross-site scripting attacks.

We've been having some challenges getting Tapestry to build correctly on the
Jenkins continuous integration server.

Mailing list traffic continues in the 900 - 1000 messages per month range.


-- 
Howard M. Lewis Ship

Creator of Apache Tapestry

The source for Tapestry training, mentoring and support. Contact me to
learn how I can get you up and productive in Tapestry fast!

(971) 678-5210
http://howardlewisship.com

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to