[aerogear-dev] security updates

[Matthias Wessendorf]

On Tue, Apr 8, 2014 at 11:03 AM, Sebastien Blanc <scm.blanc at gmail.com>wrote:

>
>
>
> On Tue, Apr 8, 2014 at 10:59 AM, Matthias Wessendorf <matzew at apache.org>wrote:
>
>> If this means, that Cordova 3.4.0 does only work with Android 4.4, than
>> we should revisit that.
>>
>> I am surprised that Cordova 3.4.0 requires Android 4.4 :-(
>>
>
> Well until now I was using Cordova 3.4.0 with my Android 4.04 without any
> issues.
>
> It just seems that cordova 3.4.0 also exposes an API that failed if used
> with Android < 4.4 , in occurence :
>
> org.apache.cordova.CordovaWebView.evaluateJavascript
>


Hrm, that's a huge surprise here - I was never expecting, when moving to
Cordova 3.4.0, we rely on Android 4.4 (and later). We need to support way
older versions (e.g. 2.3.x)
Wondering if we can avoid the 'evaluateJavascript' method ?

Others I'd actually prefer to go with "older" Cordova version, at least on
a branch



>
>
>
>
>>
>> On Tue, Apr 8, 2014 at 10:47 AM, Sebastien Blanc <scm.blanc at gmail.com>wrote:
>>
>>> Ok,
>>>
>>> I just gave give it another try with the security fix applied and the
>>> impact is way bigger than just having the right cordova version. In fact,
>>> your Android OS version must be at least 4.4 otherwise it don't work.
>>>
>>> So I'm not sure we only support Android 4.4 right ?
>>>
>>> Seb
>>>
>>>
>>>
>>>
>>> On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf <matzew at apache.org
>>> > wrote:
>>>
>>>> +1
>>>>
>>>> meeting to discuss this sounds good
>>>>
>>>>
>>>>
>>>> On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira <bruno at abstractj.org>wrote:
>>>>
>>>>> Apples and oranges my friend. Let's schedule a meeting for it.
>>>>>
>>>>> --
>>>>> abstractj
>>>>>
>>>>> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit at redhat.com)
>>>>> wrote:
>>>>> > > But, this doesn't address a security fix in our products, we
>>>>> > can't be held responsible for the platform our plugin runs on.Like
>>>>> > Tolis said if we take this route we might as well only support the
>>>>> > latest cordova version.
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> aerogear-dev mailing list
>>>>> aerogear-dev at lists.jboss.org
>>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Matthias Wessendorf
>>>>
>>>> blog: http://matthiaswessendorf.wordpress.com/
>>>> sessions: http://www.slideshare.net/mwessendorf
>>>> twitter: http://twitter.com/mwessendorf
>>>>
>>>> _______________________________________________
>>>> aerogear-dev mailing list
>>>> aerogear-dev at lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>>
>>>
>>>
>>> _______________________________________________
>>> aerogear-dev mailing list
>>> aerogear-dev at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>
>>
>>
>>
>> --
>> Matthias Wessendorf
>>
>> blog: http://matthiaswessendorf.wordpress.com/
>> sessions: http://www.slideshare.net/mwessendorf
>> twitter: http://twitter.com/mwessendorf
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>



-- 
Matthias Wessendorf

blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20140408/1a606608/attachment-0001.html