Migrating to 5.7.2

2021-04-14 Thread D Tim Cummings
Thanks for providing the migration tool. https://repo1.maven.org/maven2/org/apache/tapestry/tapestry-version-migrator/5.7.0/tapestry-version-migrator-5.7.0.jar java -jar tapestry-version-migrator-5.7.0.jar upgrade 5.7.0 A couple of changes it missed: -import

How to force the loading order of javascript libraries and modules? (jquery, jquery-ui, bootstrap)

2021-04-14 Thread Wilson Velez
I'm upgrading an application from tapestry 5.3.8 to 5.6.2. We use tapestry-jquery and an old bootstrap. Currently there is a mixin to copy some text to the clipboard and at the end of the script we inform the user that the text has been copied with a tooltip. define([], function() { var

[SECURITY VULNERABILITY DISCLOSURE] CVE-2021-27850: Apache Tapestry: Bypass of the fix for CVE-2019-0195

2021-04-14 Thread Thiago H. de Paula Figueiredo
Description: A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Before the fix of

[ANNOUNCEMENT] Tapestry 5.7.2 released

2021-04-14 Thread Thiago H. de Paula Figueiredo
Tapestry 5.7.2 is a drop-in replacement and recommended upgrade for previous 5.7.2 releases. To upgrade, just update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file -- and the new version will just work. However, please review the

[ANNOUNCEMENT] Tapestry 5.6.4 released

2021-04-14 Thread Thiago H. de Paula Figueiredo
Tapestry 5.6.5 is a drop-in replacement for Tapestry 5.4, 5.5 and 5.6 releases. It's a recommended upgrade for 5.4+ until 5.6.x. To upgrade, just update the dependency in your build configuration (Maven POM, Gradle build script, etc.) – or Download the new JAR file -- and the new version will just

Re: Coffeescript documentation is broken

2021-04-14 Thread Thiago H. de Paula Figueiredo
Hello! Please check again and let me know whether the problems are actually fixed. On Thu, Mar 25, 2021 at 7:52 AM Chris Poulsen wrote: > Hi > > I was just introducing a new employee to Tapestry and when I wanted to walk > through the coffeescript docs since I find them a little peculiar, I >