You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@mesos.apache.org by "Jacob Janco (JIRA)" <ji...@apache.org> on 2017/01/20 22:55:26 UTC

[jira] [Commented] (MESOS-6969) Use clipboard.js for copy/paste webui functionality

    [ https://issues.apache.org/jira/browse/MESOS-6969?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15832558#comment-15832558 ] 

Jacob Janco commented on MESOS-6969:
------------------------------------

https://reviews.apache.org/r/55791/

> Use clipboard.js for copy/paste webui functionality
> ---------------------------------------------------
>
>                 Key: MESOS-6969
>                 URL: https://issues.apache.org/jira/browse/MESOS-6969
>             Project: Mesos
>          Issue Type: Bug
>          Components: webui
>            Reporter: Jacob Janco
>            Assignee: Jacob Janco
>            Priority: Minor
>              Labels: webui
>
> XSS Vulnerabilities exist for zeroclipboard: https://www.cvedetails.com/cve/CVE-2014-1869/
> This patch listed below replaces this library with the pure js library clipboard.js: https://clipboardjs.com/ which also removes the webui flash dependency to support clipboard functions. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)