[
https://issues.apache.org/jira/browse/MESOS-6969?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jacob Janco updated MESOS-6969:
-------------------------------
Description:
XSS Vulnerabilities exist for zeroclipboard:
https://www.cvedetails.com/cve/CVE-2014-1869/
This patch listed below replaces this library with the pure js library
clipboard.js: https://clipboardjs.com/ which also removes the webui flash
dependency to support clipboard functions.
was:
XSS Vulnerabilities exist for zerclipboard:
https://www.cvedetails.com/cve/CVE-2014-1869/
This patch listed below replaces this library with the pure js library
clipboard.js: https://clipboardjs.com/ which also removes the webui flash
dependency to support clipboard functions.
> Use clipboard.js for copy/paste webui functionality
> ---------------------------------------------------
>
> Key: MESOS-6969
> URL: https://issues.apache.org/jira/browse/MESOS-6969
> Project: Mesos
> Issue Type: Bug
> Components: webui
> Reporter: Jacob Janco
> Assignee: Jacob Janco
> Priority: Minor
> Labels: webui
>
> XSS Vulnerabilities exist for zeroclipboard:
> https://www.cvedetails.com/cve/CVE-2014-1869/
> This patch listed below replaces this library with the pure js library
> clipboard.js: https://clipboardjs.com/ which also removes the webui flash
> dependency to support clipboard functions.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
