[keycloak-dev] Trojan in Keycloak Javascript Adapter?

[Ariel Carrera]

Hi Stian, I checked differences in keycloak.min.js comparing version 3.4.1
to 3.4.2.
I can't see a problem at first sight... but It's still a problem to see
your antivirus alerting for a threat when your browser access to a page
that uses "keycloak.min.js" or when your somebody get's a keycloak's
distribution to be installed.

Maybe this issue must to be in Jira.

Last changes in javascript file can be the problem.

Maybe function "processInit()" needs some changes.

Regards,

2018-01-08 16:26 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:

> Checked with other computer (windows 10 + windows defender).
>
> keycloak-min.js is detected as virus from  version 3.4.2 to 3.4.3
>
>
> 2018-01-03 17:44 GMT-03:00 Ramunas <ramunask at gmail.com>:
>
>> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
>> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
>> with Windows Defender on Windows 10 - no issues found
>> * checked for Windows updates. New update "Definition Update for Windows
>> Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was found and
>> installed.
>> * scanned again. No issues found.
>>
>> Ramūnas
>>
>
>
>
> --
> Ariel Carrera
>



-- 
Ariel Carrera