4:43 p.m.
Hi,
Bruno has created some PR’s to update our cordova plugins to no longer support 3.0.0 but
update it to 3.4.0, because of a number of security issues that have been solved. Now of
course we should encourage that people use the latest version, but this PR enforces it.
Also Gorkem that invested quite some time to support different versions. So what should we
pick enforce or encourage?
Cheers,
Erik Jan
4:47 p.m.
for reference, here is the related doc on the Cordova update:
http://cordova.apache.org/announcements/2014/02/20/cordova-340.html
("Removing addJavascriptInterface support from all Android versions lower
than 4.2 due to security vulnerability")
On Mon, Mar 10, 2014 at 4:43 PM, Erik Jan de Wit <edewit(a)redhat.com> wrote:
Hi,
Bruno has created some PR's to update our cordova plugins to no longer
support 3.0.0 but update it to 3.4.0, because of a number of security
issues that have been solved. Now of course we should encourage that people
use the latest version, but this PR enforces it. Also Gorkem that invested
quite some time to support different versions. So what should we pick
enforce or encourage?
Cheers,
Erik Jan
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
1:31 p.m.
On 03/10/2014 11:43 AM, Erik Jan de Wit wrote:
Hi,
Bruno has created some PR’s to update our cordova plugins to no longer support 3.0.0 but
update it to 3.4.0, because of a number of security issues that have been solved. Now of
course we should encourage that people use the latest version, but this PR enforces it.
Also Gorkem that invested quite some time to support different versions. So what should we
pick enforce or encourage?
Do we know if people are using the older version of
Cordova with our libs?
Cheers,
Erik Jan
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Summers Pittman
>Phone:404 941 4698
>Java is my crack.
3:41 p.m.
I still feel like it’s saying our application won’t run on Java 1.6, because it has
security issues.
On 11 Mar,2014, at 15:38 , Bruno Oliveira <bruno(a)abstractj.org> wrote:
No clue, but even with someone using it, I think is just the matter
of communicate and explain “why”.
--
abstractj
On March 11, 2014 at 9:31:16 AM, Summers Pittman (supittma(a)redhat.com) wrote:
>> Do we know if people are using the older version of Cordova with
> our libs?
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
3:43 p.m.
How many users do we have running Cordova projects?
--
abstractj
On March 11, 2014 at 11:41:26 AM, Erik Jan de Wit (edewit(a)redhat.com) wrote:
> I still feel like it’s saying our application won’t run on Java
1.6, because it has security issues.
On 11 Mar,2014, at 15:38 , Bruno Oliveira
wrote:
> No clue, but even with someone using it, I think is just the matter
of communicate and explain “why”.
>
> --
> abstractj
>
> On March 11, 2014 at 9:31:16
AM(http://airmail.calendar/2014-03-11%2009:31:16%20GMT-3),
Summers Pittman (supittma@redhat.com(mailto:supittma@redhat.com))
wrote:
>>> Do we know if people are using the older version of Cordova
with
>> our libs?
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev@lists.jboss.org(mailto:aerogear-dev@lists.jboss.org)
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
5:18 p.m.
I'd vote for encourage even if security should always be priority 1.
I feel that if the supported Cordova Lib versions of the AeroGear plugins
are changed every time a security vulnerability is discovered and a new
Cordova Lib version is released, then our plugins will always support only
the latest Cordova Lib version.
Thanks,
Tolis
2014-03-10 17:43 GMT+02:00 Erik Jan de Wit <edewit(a)redhat.com>:
Hi,
Bruno has created some PR's to update our cordova plugins to no longer
support 3.0.0 but update it to 3.4.0, because of a number of security
issues that have been solved. Now of course we should encourage that people
use the latest version, but this PR enforces it. Also Gorkem that invested
quite some time to support different versions. So what should we pick
enforce or encourage?
Cheers,
Erik Jan
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
6:12 p.m.
We are going to have to support a range of Cordova versions for the following reasons:
1) Sync'ing with JBDS
2) Sync'ing with what is supported at any given moment - where the supported version
may only update 2 times a year
3) Addressing the fact that customers are slow to upgrade unless there is a very real
problem exposed in their specific application - for example, if they don't use a
particular Cordova plugin then they might ignore a particular vulnerability that is tied
to a specific plugin. Another example, if their apps are only used on 25 corporate
executives phones, then they might determine the vulnerability is less important (small,
fixed audience).
We will need to pick a specific time window for all parties to "catch up" like
12 months.
On Mar 11, 2014, at 12:18 PM, tolis emmanouilidis <tolisemm(a)gmail.com> wrote:
I'd vote for encourage even if security should always be priority
1.
I feel that if the supported Cordova Lib versions of the AeroGear plugins are changed
every time a security vulnerability is discovered and a new Cordova Lib version is
released, then our plugins will always support only the latest Cordova Lib version.
Thanks,
Tolis
2014-03-10 17:43 GMT+02:00 Erik Jan de Wit <edewit(a)redhat.com>:
Hi,
Bruno has created some PR’s to update our cordova plugins to no longer support 3.0.0 but
update it to 3.4.0, because of a number of security issues that have been solved. Now of
course we should encourage that people use the latest version, but this PR enforces it.
Also Gorkem that invested quite some time to support different versions. So what should we
pick enforce or encourage?
Cheers,
Erik Jan
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
9:25 a.m.
I think we need to discuss in a meeting. I also would like to hear from Gorkem the
implications on it. Other than that, we can’t wait 12 months to apply security updates.
--
abstractj
On March 11, 2014 at 2:12:15 PM, Burr Sutter (bsutter(a)redhat.com) wrote:
> We are going to have to support a range of Cordova versions for
the following reasons:
1) Sync'ing with JBDS
2) Sync'ing with what is supported at any given moment - where
the supported version may only update 2 times a year
3) Addressing the fact that customers are slow to upgrade unless
there is a very real problem exposed in their specific application
- for example, if they don't use a particular Cordova plugin then
they might ignore a particular vulnerability that is tied to
a specific plugin. Another example, if their apps are only used
on 25 corporate executives phones, then they might determine
the vulnerability is less important (small, fixed audience).
We will need to pick a specific time window for all parties to "catch
up" like 12 months.
9:29 a.m.
But, this doesn’t address a security fix in our products, we can’t be held responsible for
the platform our plugin runs on.Like Tolis said if we take this route we might as well
only support the latest cordova version.
On 14 Mar,2014, at 9:25 , Bruno Oliveira <bruno(a)abstractj.org> wrote:
I think we need to discuss in a meeting. I also would like to hear
from Gorkem the implications on it. Other than that, we can’t wait 12 months to apply
security updates.
9:58 a.m.
Apples and oranges my friend. Let’s schedule a meeting for it.
--
abstractj
On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com) wrote:
> But, this doesn’t address a security fix in our products, we
can’t be held responsible for the platform our plugin runs on.Like
Tolis said if we take this route we might as well only support the
latest cordova version.
10:21 a.m.
+1
meeting to discuss this sounds good
On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira <bruno(a)abstractj.org> wrote:
Apples and oranges my friend. Let's schedule a meeting for it.
--
abstractj
On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com)
wrote:
> > But, this doesn't address a security fix in our products, we
> can't be held responsible for the platform our plugin runs on.Like
> Tolis said if we take this route we might as well only support the
> latest cordova version.
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
10:47 a.m.
Ok,
I just gave give it another try with the security fix applied and the
impact is way bigger than just having the right cordova version. In fact,
your Android OS version must be at least 4.4 otherwise it don't work.
So I'm not sure we only support Android 4.4 right ?
Seb
On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
+1
meeting to discuss this sounds good
On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira <bruno(a)abstractj.org>wrote:
> Apples and oranges my friend. Let's schedule a meeting for it.
>
> --
> abstractj
>
> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com)
> wrote:
> > > But, this doesn't address a security fix in our products, we
> > can't be held responsible for the platform our plugin runs on.Like
> > Tolis said if we take this route we might as well only support the
> > latest cordova version.
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
10:59 a.m.
If this means, that Cordova 3.4.0 does only work with Android 4.4, than we
should revisit that.
I am surprised that Cordova 3.4.0 requires Android 4.4 :-(
On Tue, Apr 8, 2014 at 10:47 AM, Sebastien Blanc <scm.blanc(a)gmail.com>wrote:
Ok,
I just gave give it another try with the security fix applied and the
impact is way bigger than just having the right cordova version. In fact,
your Android OS version must be at least 4.4 otherwise it don't work.
So I'm not sure we only support Android 4.4 right ?
Seb
On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
> +1
>
> meeting to discuss this sounds good
>
>
>
> On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira <bruno(a)abstractj.org>wrote:
>
>> Apples and oranges my friend. Let's schedule a meeting for it.
>>
>> --
>> abstractj
>>
>> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com)
>> wrote:
>> > > But, this doesn't address a security fix in our products, we
>> > can't be held responsible for the platform our plugin runs on.Like
>> > Tolis said if we take this route we might as well only support the
>> > latest cordova version.
>>
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
>
> --
> Matthias Wessendorf
>
> blog: http://matthiaswessendorf.wordpress.com/
> sessions: http://www.slideshare.net/mwessendorf
> twitter: http://twitter.com/mwessendorf
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
11:03 a.m.
On Tue, Apr 8, 2014 at 10:59 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
If this means, that Cordova 3.4.0 does only work with Android 4.4,
than we
should revisit that.
I am surprised that Cordova 3.4.0 requires Android 4.4 :-(
Well until now I was using Cordova 3.4.0 with my Android 4.04 without any
issues.
It just seems that cordova 3.4.0 also exposes an API that failed if used
with Android < 4.4 , in occurence :
org.apache.cordova.CordovaWebView.evaluateJavascript
On Tue, Apr 8, 2014 at 10:47 AM, Sebastien Blanc <scm.blanc(a)gmail.com>wrote:
> Ok,
>
> I just gave give it another try with the security fix applied and the
> impact is way bigger than just having the right cordova version. In fact,
> your Android OS version must be at least 4.4 otherwise it don't work.
>
> So I'm not sure we only support Android 4.4 right ?
>
> Seb
>
>
>
>
> On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf
<matzew(a)apache.org>wrote:
>
>> +1
>>
>> meeting to discuss this sounds good
>>
>>
>>
>> On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira
<bruno(a)abstractj.org>wrote:
>>
>>> Apples and oranges my friend. Let's schedule a meeting for it.
>>>
>>> --
>>> abstractj
>>>
>>> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com)
>>> wrote:
>>> > > But, this doesn't address a security fix in our products, we
>>> > can't be held responsible for the platform our plugin runs on.Like
>>> > Tolis said if we take this route we might as well only support the
>>> > latest cordova version.
>>>
>>>
>>> _______________________________________________
>>> aerogear-dev mailing list
>>> aerogear-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>
>>
>>
>>
>> --
>> Matthias Wessendorf
>>
>> blog: http://matthiaswessendorf.wordpress.com/
>> sessions: http://www.slideshare.net/mwessendorf
>> twitter: http://twitter.com/mwessendorf
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
11:04 a.m.
No, it does not! I have Cordova 3.4 rumning on Android 4.1.
Enviado do meu iPad
No dia 08/04/2014, às 09:59, Matthias Wessendorf <matzew(a)apache.org> escreveu:
If this means, that Cordova 3.4.0 does only work with Android 4.4,
than we should revisit that.
I am surprised that Cordova 3.4.0 requires Android 4.4 :-(
> On Tue, Apr 8, 2014 at 10:47 AM, Sebastien Blanc <scm.blanc(a)gmail.com> wrote:
> Ok,
>
> I just gave give it another try with the security fix applied and the impact is way
bigger than just having the right cordova version. In fact, your Android OS version must
be at least 4.4 otherwise it don't work.
>
> So I'm not sure we only support Android 4.4 right ?
>
> Seb
>
>
>
>
>> On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf <matzew(a)apache.org>
wrote:
>> +1
>>
>> meeting to discuss this sounds good
>>
>>
>>
>>> On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira <bruno(a)abstractj.org>
wrote:
>>> Apples and oranges my friend. Let’s schedule a meeting for it.
>>>
>>> --
>>> abstractj
>>>
>>> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com) wrote:
>>> > > But, this doesn’t address a security fix in our products, we
>>> > can’t be held responsible for the platform our plugin runs on.Like
>>> > Tolis said if we take this route we might as well only support the
>>> > latest cordova version.
>>>
>>>
>>> _______________________________________________
>>> aerogear-dev mailing list
>>> aerogear-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>>
>>
>> --
>> Matthias Wessendorf
>>
>> blog: http://matthiaswessendorf.wordpress.com/
>> sessions: http://www.slideshare.net/mwessendorf
>> twitter: http://twitter.com/mwessendorf
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
11:17 a.m.
On Tue, Apr 8, 2014 at 11:03 AM, Sebastien Blanc <scm.blanc(a)gmail.com>wrote:
On Tue, Apr 8, 2014 at 10:59 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
> If this means, that Cordova 3.4.0 does only work with Android 4.4, than
> we should revisit that.
>
> I am surprised that Cordova 3.4.0 requires Android 4.4 :-(
>
Well until now I was using Cordova 3.4.0 with my Android 4.04 without any
issues.
It just seems that cordova 3.4.0 also exposes an API that failed if used
with Android < 4.4 , in occurence :
org.apache.cordova.CordovaWebView.evaluateJavascript
Hrm, that's a huge surprise here - I was never expecting, when moving to
Cordova 3.4.0, we rely on Android 4.4 (and later). We need to support way
older versions (e.g. 2.3.x)
Wondering if we can avoid the 'evaluateJavascript' method ?
Others I'd actually prefer to go with "older" Cordova version, at least on
a branch
>
> On Tue, Apr 8, 2014 at 10:47 AM, Sebastien Blanc <scm.blanc(a)gmail.com>wrote:
>
>> Ok,
>>
>> I just gave give it another try with the security fix applied and the
>> impact is way bigger than just having the right cordova version. In fact,
>> your Android OS version must be at least 4.4 otherwise it don't work.
>>
>> So I'm not sure we only support Android 4.4 right ?
>>
>> Seb
>>
>>
>>
>>
>> On Fri, Mar 14, 2014 at 10:21 AM, Matthias Wessendorf <matzew(a)apache.org
>> > wrote:
>>
>>> +1
>>>
>>> meeting to discuss this sounds good
>>>
>>>
>>>
>>> On Fri, Mar 14, 2014 at 9:58 AM, Bruno Oliveira
<bruno(a)abstractj.org>wrote:
>>>
>>>> Apples and oranges my friend. Let's schedule a meeting for it.
>>>>
>>>> --
>>>> abstractj
>>>>
>>>> On March 14, 2014 at 5:56:42 AM, Erik Jan de Wit (edewit(a)redhat.com)
>>>> wrote:
>>>> > > But, this doesn't address a security fix in our products,
we
>>>> > can't be held responsible for the platform our plugin runs
on.Like
>>>> > Tolis said if we take this route we might as well only support the
>>>> > latest cordova version.
>>>>
>>>>
>>>> _______________________________________________
>>>> aerogear-dev mailing list
>>>> aerogear-dev(a)lists.jboss.org
>>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>>
>>>
>>>
>>>
>>> --
>>> Matthias Wessendorf
>>>
>>> blog: http://matthiaswessendorf.wordpress.com/
>>> sessions: http://www.slideshare.net/mwessendorf
>>> twitter: http://twitter.com/mwessendorf
>>>
>>> _______________________________________________
>>> aerogear-dev mailing list
>>> aerogear-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>
>>
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
>
> --
> Matthias Wessendorf
>
> blog: http://matthiaswessendorf.wordpress.com/
> sessions: http://www.slideshare.net/mwessendorf
> twitter: http://twitter.com/mwessendorf
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
11:17 a.m.
Hi,
The simplified plugin is using evaluateJavascript in favour of sendJavascript, but this
method is only available in 4.4 as this is a new method introduced by the chrome web view
we can change this by using sendJavascript method again. Don’t know if this will introduce
security errors, but I guess not. I think the actual fix is not using the old web view.
Cheers,
Erik Jan
11:21 a.m.
On Tue, Apr 8, 2014 at 11:17 AM, Erik Jan de Wit <edewit(a)redhat.com> wrote:
Hi,
The simplified plugin is using evaluateJavascript in favour of
sendJavascript, but this method is only available in 4.4
Ah! Thanks for clarification! But this, than, automatically means: the
Push-Plugin requires 4.4 ? That's a huge impact. We have to support way
older versions, w/ the plugin.
as this is a new method introduced by the chrome web view we can
change
this by using sendJavascript method again. Don't know if this will
introduce security errors, but I guess not.
That would be worth to investigate. Not only for security - also for 'love'
of older Android versions!
Thanks for the details, Erik!
-Matthias
I think the actual fix is not using the old web view.
Cheers,
Erik Jan
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
2:36 p.m.
On Tue, Apr 8, 2014 at 11:21 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
On Tue, Apr 8, 2014 at 11:17 AM, Erik Jan de Wit <edewit(a)redhat.com>wrote:
> Hi,
>
> The simplified plugin is using evaluateJavascript in favour of
> sendJavascript, but this method is only available in 4.4
Ah! Thanks for clarification! But this, than, automatically means: the
Push-Plugin requires 4.4 ? That's a huge impact. We have to support way
older versions, w/ the plugin.
> as this is a new method introduced by the chrome web view we can change
> this by using sendJavascript method again. Don't know if this will
> introduce security errors, but I guess not.
That would be worth to investigate. Not only for security - also for
'love' of older Android versions!
+9001, I would even say that this is quite critical and we should find a
solution before we release any new version of the plugin.
Thanks for the details, Erik!
-Matthias
> I think the actual fix is not using the old web view.
>
> Cheers,
> Erik Jan
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
4:14 p.m.
On Tue, Apr 8, 2014 at 2:36 PM, Sebastien Blanc <scm.blanc(a)gmail.com> wrote:
On Tue, Apr 8, 2014 at 11:21 AM, Matthias Wessendorf <matzew(a)apache.org>wrote:
>
>
>
> On Tue, Apr 8, 2014 at 11:17 AM, Erik Jan de Wit <edewit(a)redhat.com>wrote:
>
>> Hi,
>>
>> The simplified plugin is using evaluateJavascript in favour of
>> sendJavascript, but this method is only available in 4.4
>
>
>
> Ah! Thanks for clarification! But this, than, automatically means: the
> Push-Plugin requires 4.4 ? That's a huge impact. We have to support way
> older versions, w/ the plugin.
>
>
>> as this is a new method introduced by the chrome web view we can change
>> this by using sendJavascript method again. Don't know if this will
>> introduce security errors, but I guess not.
>
>
> That would be worth to investigate. Not only for security - also for
> 'love' of older Android versions!
>
+9001, I would even say that this is quite critical and we should find a
solution before we release any new version of the plugin.
+1 IMO it's a must criteria to not rely on newer Android versions like 4.4
(or later)
-M
>
> Thanks for the details, Erik!
>
> -Matthias
>
>
>
>> I think the actual fix is not using the old web view.
>>
>> Cheers,
>> Erik Jan
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
>
> --
> Matthias Wessendorf
>
> blog: http://matthiaswessendorf.wordpress.com/
> sessions: http://www.slideshare.net/mwessendorf
> twitter: http://twitter.com/mwessendorf
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
--
Matthias Wessendorf
blog: http://matthiaswessendorf.wordpress.com/
sessions: http://www.slideshare.net/mwessendorf
twitter: http://twitter.com/mwessendorf
10:37 a.m.
On Tue, 8 Apr 2014 16:14:26 +0200
Matthias Wessendorf <matzew(a)apache.org> wrote:
On Tue, Apr 8, 2014 at 2:36 PM, Sebastien Blanc
<scm.blanc(a)gmail.com> wrote:
>
>
>
> On Tue, Apr 8, 2014 at 11:21 AM, Matthias Wessendorf
> <matzew(a)apache.org>wrote:
>
>>
>>
>>
>> On Tue, Apr 8, 2014 at 11:17 AM, Erik Jan de Wit
<edewit(a)redhat.com>wrote:
>>
>>> Hi,
>>>
>>> The simplified plugin is using evaluateJavascript in favour of
>>> sendJavascript, but this method is only available in 4.4
>>
>>
>>
>> Ah! Thanks for clarification! But this, than, automatically means: the
>> Push-Plugin requires 4.4 ? That's a huge impact. We have to support way
>> older versions, w/ the plugin.
>>
>>
>>> as this is a new method introduced by the chrome web view we can change
>>> this by using sendJavascript method again. Don't know if this will
>>> introduce security errors, but I guess not.
>>
>>
>> That would be worth to investigate. Not only for security - also for
>> 'love' of older Android versions!
>>
> +9001, I would even say that this is quite critical and we should find a
> solution before we release any new version of the plugin.
>
+1 IMO it's a must criteria to not rely on newer Android versions like 4.4
(or later)
+3 as well.
-M
>
>>
>> Thanks for the details, Erik!
>>
>> -Matthias
>>
>>
>>
>>> I think the actual fix is not using the old web view.
>>>
>>> Cheers,
>>> Erik Jan
>>> _______________________________________________
>>> aerogear-dev mailing list
>>> aerogear-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>>
>>
>>
>>
>> --
>> Matthias Wessendorf
>>
>> blog: http://matthiaswessendorf.wordpress.com/
>> sessions: http://www.slideshare.net/mwessendorf
>> twitter: http://twitter.com/mwessendorf
>>
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>
>
> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>
10:42 a.m.
On Wed, Apr 9, 2014 at 10:37 AM, Karel Piwko <kpiwko(a)redhat.com> wrote:
On Tue, 8 Apr 2014 16:14:26 +0200
Matthias Wessendorf <matzew(a)apache.org> wrote:
> On Tue, Apr 8, 2014 at 2:36 PM, Sebastien Blanc <scm.blanc(a)gmail.com>
wrote:
>
> >
> >
> >
> > On Tue, Apr 8, 2014 at 11:21 AM, Matthias Wessendorf
> > <matzew(a)apache.org>wrote:
> >
> >>
> >>
> >>
> >> On Tue, Apr 8, 2014 at 11:17 AM, Erik Jan de Wit <edewit(a)redhat.com
>wrote:
> >>
> >>> Hi,
> >>>
> >>> The simplified plugin is using evaluateJavascript in favour of
> >>> sendJavascript, but this method is only available in 4.4
> >>
> >>
> >>
> >> Ah! Thanks for clarification! But this, than, automatically means: the
> >> Push-Plugin requires 4.4 ? That's a huge impact. We have to support
way
> >> older versions, w/ the plugin.
> >>
> >>
> >>> as this is a new method introduced by the chrome web view we can
change
> >>> this by using sendJavascript method again. Don't know if this will
> >>> introduce security errors, but I guess not.
> >>
> >>
> >> That would be worth to investigate. Not only for security - also for
> >> 'love' of older Android versions!
> >>
> > +9001, I would even say that this is quite critical and we should find
a
> > solution before we release any new version of the plugin.
> >
>
> +1 IMO it's a must criteria to not rely on newer Android versions like
4.4
> (or later)
>
+3 as well.
Things have gone back to normal ;)
https://github.com/aerogear/aerogear-pushplugin-cordova/commit/4a26b801f4...
But like I suggested on IRC, let's wait for the Cordova 3.4.1 release
(which could happen today and that contains the xcode 5.1 fix) before
releasing a new version of the plugin
> -M
>
>
> >
> >>
> >> Thanks for the details, Erik!
> >>
> >> -Matthias
> >>
> >>
> >>
> >>> I think the actual fix is not using the old web view.
> >>>
> >>> Cheers,
> >>> Erik Jan
> >>> _______________________________________________
> >>> aerogear-dev mailing list
> >>> aerogear-dev(a)lists.jboss.org
> >>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >>>
> >>
> >>
> >>
> >> --
> >> Matthias Wessendorf
> >>
> >> blog: http://matthiaswessendorf.wordpress.com/
> >> sessions: http://www.slideshare.net/mwessendorf
> >> twitter: http://twitter.com/mwessendorf
> >>
> >> _______________________________________________
> >> aerogear-dev mailing list
> >> aerogear-dev(a)lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >>
> >
> >
> > _______________________________________________
> > aerogear-dev mailing list
> > aerogear-dev(a)lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/aerogear-dev
> >
>
>
>
_______________________________________________
aerogear-dev mailing list
aerogear-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/aerogear-dev
3670
days inactive
3700
days old
22 comments
9 participants
participants (9)
-
Bruno Oliveira -
Burr Sutter -
Erik Jan de Wit -
Karel Piwko -
Matthias Wessendorf -
Miiguel Lemos -
Sebastien Blanc -
Summers Pittman -
tolis emmanouilidis