 |
 User: Login | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. News and Articles about Designing and Developing with Yahoo! Libraries. |
| Address URL | http://www.yuiblog.com/blog Registered: 26-Apr-2008 |
| Ads: |
|
Send to email | Announcing YUI 2.8.2 ? Important Security Update for All Users of YUI 2.4.0-2.8.1 in Development | By Eric Miraglia el 25-Oct-2010 | The YUI team released YUI 2.8.2 today. This release corrects a security-related defect that was introduced in the YUI 2 Flash component infrastructure beginning with the YUI 2.4.0 release. This defect allows JavaScript injection exploits to be created against domains that host affected YUI .swf files. Visit the security bulletin for YUI 2.8.2 for full details about how to identify and replace affected files.
If your site hosts a YUI 2 distribution between version 2.4.0 and 2.8.1 that includes these files, it is affected by this vulnerability.
If your site loads YUI 2 from Yahoo’s CDN (yui.yahooapis.com) or from Google’s CDN (ajax.googleapis.com), and the files are not hosted on your own domain, you are not affected. YUI 3 is not affected by this issue.
You can download YUI 2.8.2 (and patched versions of YUI 2.4.0-2.8.1) from the YUILibrary.com downloads page.
See the security bulletin for information about how to determine whether your site is affected, how to remedy the problem, and how to verify the fix.
Read 15 times

|
|
 |
 |
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
| YUIConf 2011 Update: Announcing More Talks and a Free Workshop! | | We’ve been busy rounding out our stellar lineup of tech talks for YUIConf 2011! See the latest schedule and register now — early bird registration ends Tuesday, October 24. In conjunction with the Yahoo! Mail team, we’re excited to announce the addition of a free workshop: Developing Apps for Yahoo! Mail. Get the hands-on expertise [...] [..] Read complete article |  | Published 24-Oct-2011 by Jenny Donnelly in DevelopmentYUI Events Read 5 times. More hits in  |
|
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
| YUIConf 2011 Update: Announcing More Talks and a Free Workshop! | | We’ve been busy rounding out our stellar lineup of tech talks for YUIConf 2011! See the latest schedule and register now — early bird registration ends Tuesday, October 24. In conjunction with the Yahoo! Mail team, we’re excited to announce the addition of a free workshop: Developing Apps for Yahoo! Mail. Get the hands-on expertise [...] [..] Read complete article |  | Published 24-Oct-2011 by Jenny Donnelly in DevelopmentYUI Events Read 4 times. More hits in  |
|
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
| YUIConf 2011 Update: Announcing More Talks and a Free Workshop! | | We’ve been busy rounding out our stellar lineup of tech talks for YUIConf 2011! See the latest schedule and register now — early bird registration ends Tuesday, October 24. In conjunction with the Yahoo! Mail team, we’re excited to announce the addition of a free workshop: Developing Apps for Yahoo! Mail. Get the hands-on expertise [...] [..] Read complete article |  | Published 24-Oct-2011 by Jenny Donnelly in DevelopmentYUI Events Read 5 times. More hits in  |
|
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
| YUIConf 2011 Update: Announcing More Talks and a Free Workshop! | | We’ve been busy rounding out our stellar lineup of tech talks for YUIConf 2011! See the latest schedule and register now — early bird registration ends Tuesday, October 24. In conjunction with the Yahoo! Mail team, we’re excited to announce the addition of a free workshop: Developing Apps for Yahoo! Mail. Get the hands-on expertise [...] [..] Read complete article |  | Published 24-Oct-2011 by Jenny Donnelly in DevelopmentYUI Events Read 14 times. More hits in  |
|
 | Yahoo User Interface Blog | Blogger | Is a collection of industrial-grade JavaScript utilities and widgets that enable you to efficiently get the most out of today’s powerful web applications. Yahoo! User Interface Blog News and Articles about Designing and Developing wiht Yahoo! Libraries. |
| YUIConf 2011 Update: Announcing More Talks and a Free Workshop! | | We’ve been busy rounding out our stellar lineup of tech talks for YUIConf 2011! See the latest schedule and register now — early bird registration ends Tuesday, October 24. In conjunction with the Yahoo! Mail team, we’re excited to announce the addition of a free workshop: Developing Apps for Yahoo! Mail. Get the hands-on expertise [...] [..] Read complete article |  | Published 24-Oct-2011 by Jenny Donnelly in DevelopmentYUI Events Read 7 times. More hits in  |
|
| Security hole in Facebook and Dropbox apps leave iOS users vulnerable [updated] | | U.K.-based Android and iOS app developer Gareth Wright recently discovered a security hole in Facebook?s native mobile apps that can be used to steal a user’s personal information. Facebook?s Android and iOS apps do not encrypt login credentials, instead storing them in plain text files and allowing the information to be easily accessed and transferred over a USB connection, or more likely, [..] Read complete article |  | Published 06-Apr-2012 by Dan Graziano in MobileSecurityAndroidAppsDropboxfacebookiOSmobileSmartphonesTablets Read 2 times. More hits in ![Images about Security hole in Facebook and Dropbox apps leave iOS users vulnerable [updated]](./images/photo.gif) |
|
 | Nerdblog | Blogger | Provides news about hardware, software, notebooks, laptops, PCs, Mac, PDAs Nerdblog.Net |
 | Kotaku`s The Gamers Guide | Blogger | XBOX 360 Gamers Weblog
Gossip, news and leaks for obsessive gamers Kotaku As if you don't waste enough of your time in a gamer's haze, here's Kotaku: a gamer's guide that goes beyond the press release. Gossip, cheats, criticism, design, nostalgia, pred |
 | Kotaku`s The Gamers Guide | Blogger | XBOX 360 Gamers Weblog
Gossip, news and leaks for obsessive gamers Kotaku As if you don't waste enough of your time in a gamer's haze, here's Kotaku: a gamer's guide that goes beyond the press release. Gossip, cheats, criticism, design, nostalgia, pred |
|
Warning We are not responsible of information posted from external feeds. Use this website at your own risk.
Notice: We will not be liable for any direct or indirect loss or damage arising under this disclaimer or in connection with our website, whether arising in tort, contract, or otherwise.
|
|
| |