English 中文(简体)
How can I apply the YUI security vulnerability patch on my deployed application using Orbeon Forms?
原标题:

Yahoo! released a security patch for all the applications using YUI. As Orbeon Forms uses YUI, how can I apply this patch on the version of Orbeon Forms that I am using?

最佳回答

First, you are safe and don t need to patch Orbeon Forms if you are using a version of Orbeon Forms released on or after October 25, 2010 (the day the security vulnerability and patch was announced).

If you are using an earlier build:

  1. Unzip the file WEB-INF/lib/orbeon-resources-public.jar in a temporary directory.
  2. In that directory, open ops/yui/yahoo/yahoo.js. Towards the top of the file, you ll see a version number (e.g. 2.6.0). This tells you what version of YUI your build of Orbeon Forms uses.
  3. From the YUI page about this security vulnerability, download the patches for the version of YUI used by your build of Orbeon Forms.
  4. Apply the patches by replacing the swf files in the temporary directory by those in the patches you downloaded. The YUI file are located under ops/yui in your temporary directory.
  5. Just in case, make a copy of the WEB-INF/lib/orbeon-resources-public.jar in your Orbeon Forms build.
  6. Zip the content of your temporary directory into a file called orbeon-resources-public.jar and move it to WEB-INF/lib in your Orbeon Forms build, replacing the existing copy of that file with the version you created.
问题回答

暂无回答




相关问题
xform data grid

I am using orbeon to process my xforms. I am attempting to create a data grid that I can use to copy and paste rows/columns of data from my clipboard (excel). Do you have any clue how I can implement ...

Connect Chiba xForm to a restful web service (exist db)

I need to read an xml instance from an exist db. I am attempting to connect chiba to a restful web service via the following command: <xf:model> <xf:instance id="data-instance" ...

ISML PAC to XForm Conversion

Are there any tools or write-ups that can help in converting ISML PACs to XForms? Does anyone have experience in such a conversion?

XForms: how to deal with instance data that changes?

At the moment I am working on an XForms application to mutate XML data. This data comes from a local XML file. The file is exported from another application in a static way and read into the ...

Client side XForms processing tools [closed]

What would be the best client side javascript based XForms processor? I m trying to migrate plugin (activeX) based Xforms processing solution to a javascript based client side processor. But the ...

Default Values in XForms Input

I have an XForm that has certain fields that may often be left blank (optional street address). Is there is technique to set a default value for that field, preferably a space (I am running into weird ...

热门标签