[WW-2134] Upgrade Dojo from 0.4.2 to 0.4.3 to address possible XSS Issues

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.0.9
• Fix Version/s: 2.1.0
• Component/s: Integration
• Flags: Important
• Assignee: Musachy Barroso
• Reporter: Ian Roughley
• Created: 24/Aug/07 14:02
• Updated: 28/Oct/12 22:08
• Resolved: 30/Aug/07 17:48

Description

From the Dojo Toolkit website: "Dojo* 0.4.3 is now available to download. This is a security release. Dojo 0.4.1 and 0.4.2 users are strongly recommended to upgrade as soon as possible. 0.4.1 and 0.4.2 have a flaw in two files that could allow cross site scripting (XSS) attacks against your site if you do not upgrade."

As 2.0.9 runs 0.4.2, we should upgrade to 0.4.3 before releasing Struts 2.0.10.

Even if the upgrade is not technically needed, from a publicity standpoint (in addressing all possible security concerns) I think it is a good idea.