eclipse-ee4j / eclipse-ee4j/krazo-extensions

Release 3.0.1 with security fixes

Open
#14 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
2
Forks
2
PR merge metrics
No merged PRs in 30d

Description

It's been a while since the last release - I just bumped into the old freemarker issue again, where stacktraces get logged to the html output on production. That is quiet a security mishap. ;-)

#9

We've fixed that long ago, but didn't make it into the 3.0.0 release. Could we do a 3.0.1?

Contributor guide

Open the contributing guide

Research direction

Start by reading issue #9 to understand the already-fixed Freemarker security problem and why it was omitted from 3.0.0. No files or tests are named in this issue, so identify the repository's release entry points before proceeding. Done means a 3.0.1 release is prepared that includes the fix.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
release, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.