Re: [keycloak-dev] Trojan in Keycloak Javascript Adapter?
Hi Stian, I checked differences in keycloak.min.js comparing version 3.4.1
to 3.4.2.
I can't see a problem at first sight... but It's still a problem to see
your antivirus alerting for a threat when your browser access to a page
that uses "keycloak.min.js" or when your somebody get's a keycloak's
distribution to be installed.
Maybe this issue must to be in Jira.
Last changes in javascript file can be the problem.
Maybe function "processInit()" needs some changes.
Regards,
2018-01-08 16:26 GMT-03:00 Ariel Carrera <carreraariel(a)gmail.com>:
Checked with other computer (windows 10 + windows defender).
keycloak-min.js is detected as virus from version 3.4.2 to 3.4.3
2018-01-03 17:44 GMT-03:00 Ramunas <ramunask(a)gmail.com>:
> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
> with Windows Defender on Windows 10 - no issues found
> * checked for Windows updates. New update "Definition Update for Windows
> Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was found and
> installed.
> * scanned again. No issues found.
>
> Ramūnas
>
--
Ariel Carrera
--
Ariel Carrera