You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@wookie.apache.org by sc...@apache.org on 2012/10/07 14:38:27 UTC

svn commit: r1395290 - /incubator/wookie/trunk/NEW_AND_NOTEWORTHY

Author: scottbw
Date: Sun Oct  7 12:38:27 2012
New Revision: 1395290

URL: http://svn.apache.org/viewvc?rev=1395290&view=rev
Log:
Added draft new and noteworthy content for 0.13

Modified:
    incubator/wookie/trunk/NEW_AND_NOTEWORTHY

Modified: incubator/wookie/trunk/NEW_AND_NOTEWORTHY
URL: http://svn.apache.org/viewvc/incubator/wookie/trunk/NEW_AND_NOTEWORTHY?rev=1395290&r1=1395289&r2=1395290&view=diff
==============================================================================
--- incubator/wookie/trunk/NEW_AND_NOTEWORTHY (original)
+++ incubator/wookie/trunk/NEW_AND_NOTEWORTHY Sun Oct  7 12:38:27 2012
@@ -1,27 +1,20 @@
-# New and Noteworthy: 0.12.0
+# New and Noteworthy: 0.13.0
 
-## W3C XML Digital Signatures for Widgets specification implemented
+## Single "deploy" location
 
-W3C XML Digital Signatures for Widgets specifies how both authors and distributors of widgets can 
-digitally sign a Widget package.  This means that an organisation can choose to automatically install  
-and update widgets that carry recognised signatures - for example from a reputable online widget store 
-(distributor) or from an approved widget author rather than require administrative intervention to approve 
-them.
- 
-See http://dev.w3.org/2006/waf/widgets-digsig/ for more information on the specification.
-
-Thanks to Pushpalanka Jayawardhana for this new feature 
-
-## Wookie can broadcast a widget import message 
-
-Using Wookies property file, you can set a flag and URL endpoint to allow Wookie
-to POST a message to indicate that it has imported a new widget.  This is useful  
-in situations where a container application also wants to import these widgets.
- 
-## W3C package Validator REST service
-
-Wookie can be configured to validate W3C Widget packages.  This is different behaviour
-from importing a package into Wookie, as in this case (if enabled) anyone can validate
-a package.  The package is not imported into Wookie and its resources are all removed after
-parsing.  This service provide a way for users to check if a package is valid or not and
-exposes the W3C Parser module as a service.
\ No newline at end of file
+There is no longer separate "wservices" and "deploy" folders; instead, widgets are unpacked directly into the deploy folder.
+
+## Locked domains
+
+For added security, each widget instance can be viewed from a unique origin (using subdomains), preventing cross-widget communication and scripting attacks.
+Locked domains are disabled by default; configuration instructions can be found in widgetserver.properties.
+
+## Improved OAuth Support
+
+...
+
+## Widget Automatic Updates
+
+Wookie now supports automatic updating of widgets, implementing the Widget Updates spec, allowing widgets to be updated as new versions are released. Update
+checks can be configured to run hourly, daily or weekly. By default automatic updates are disabled; Configuration instructions can be found in 
+widgetserver.properties. 
\ No newline at end of file