[development] jQuery 1.2 is released

Earnie Boyd earnie at users.sourceforge.net
Fri Sep 14 14:10:35 UTC 2007


Quoting Jeff Eaton <jeff at viapositiva.net>:

> This is very true. The concern that sparked this discussion revolved  
> around *automatically downloading* javascript files from a *remote  
> server* and automatically including them in Drupal's output to end- 
> users. Compromising remote servers in that scenario (as happened with 
>  Wordpress) could easily result in jillions of Drupal sites auto- 
> downloading a compromised version of a js file and 'reflecting' it  
> out to all of their users.
>

It wasn't me and I missed the suggestion.  This is different than 
allowing the administrator to upload a file to the files/jquery 
directory.

Earnie -- http://for-my-kids.com/
-- http://give-me-an-offer.com/



More information about the development mailing list