android - Cordova Security Paches -



android - Cordova Security Paches -

we using cordova 2.4 android. several cve vulnerabilities have been fixed in 3.5.1 , greater:

cve-2014-3500 cve-2014-3501 cve-2014-3502

can point me cordova patches these issues? i'd see if can backport patches cordova 2.4.

thanks, brian

it's not little patch can cherry-picked. vulnerability prepare relies on new function added after 2.4. recommended upgrade cordova 3.5.1 or later. unless doing unusual, easier upgrade 3.5.1 backport 2.4.

android security cordova patch

Comments

Popular posts from this blog

c - Compilation of a code: unkown type name string -

java - Bypassing "final local variable defined in an enclosing type" -

json - Hibernate and Jackson (java.lang.IllegalStateException: Cannot call sendError() after the response has been committed) -