Author: scottbw
Date: Sun Oct 7 12:38:27 2012
New Revision: 1395290
URL: http://svn.apache.org/viewvc?rev=1395290&view=rev
Log:
Added draft new and noteworthy content for 0.13
Modified:
incubator/wookie/trunk/NEW_AND_NOTEWORTHY
Modified: incubator/wookie/trunk/NEW_AND_NOTEWORTHY
URL:
http://svn.apache.org/viewvc/incubator/wookie/trunk/NEW_AND_NOTEWORTHY?rev=1395290&r1=1395289&r2=1395290&view=diff
==============================================================================
--- incubator/wookie/trunk/NEW_AND_NOTEWORTHY (original)
+++ incubator/wookie/trunk/NEW_AND_NOTEWORTHY Sun Oct 7 12:38:27 2012
@@ -1,27 +1,20 @@
-# New and Noteworthy: 0.12.0
+# New and Noteworthy: 0.13.0
-## W3C XML Digital Signatures for Widgets specification implemented
+## Single "deploy" location
-W3C XML Digital Signatures for Widgets specifies how both authors and
distributors of widgets can
-digitally sign a Widget package. This means that an organisation can choose
to automatically install
-and update widgets that carry recognised signatures - for example from a
reputable online widget store
-(distributor) or from an approved widget author rather than require
administrative intervention to approve
-them.
-
-See http://dev.w3.org/2006/waf/widgets-digsig/ for more information on the
specification.
-
-Thanks to Pushpalanka Jayawardhana for this new feature
-
-## Wookie can broadcast a widget import message
-
-Using Wookies property file, you can set a flag and URL endpoint to allow
Wookie
-to POST a message to indicate that it has imported a new widget. This is
useful
-in situations where a container application also wants to import these widgets.
-
-## W3C package Validator REST service
-
-Wookie can be configured to validate W3C Widget packages. This is different
behaviour
-from importing a package into Wookie, as in this case (if enabled) anyone can
validate
-a package. The package is not imported into Wookie and its resources are all
removed after
-parsing. This service provide a way for users to check if a package is valid
or not and
-exposes the W3C Parser module as a service.
\ No newline at end of file
+There is no longer separate "wservices" and "deploy" folders; instead, widgets
are unpacked directly into the deploy folder.
+
+## Locked domains
+
+For added security, each widget instance can be viewed from a unique origin
(using subdomains), preventing cross-widget communication and scripting attacks.
+Locked domains are disabled by default; configuration instructions can be
found in widgetserver.properties.
+
+## Improved OAuth Support
+
+...
+
+## Widget Automatic Updates
+
+Wookie now supports automatic updating of widgets, implementing the Widget
Updates spec, allowing widgets to be updated as new versions are released.
Update
+checks can be configured to run hourly, daily or weekly. By default automatic
updates are disabled; Configuration instructions can be found in
+widgetserver.properties.
\ No newline at end of file
