Differential D8604

Update Riot to 1.5.15
ClosedPublic
Actions

Authored by Staudey on Apr 1 2020, 5:06 PM.

Tags

Referenced Files

	F11051602: D8604.id20576.diff
	Thu, Aug 10, 8:09 PM

	F11051601: D8604.id20568.diff
	Thu, Aug 10, 8:09 PM

	F11051600: D8604.id.diff
	Thu, Aug 10, 8:09 PM

	F11038998: D8604.id20568.diff
	Thu, Aug 10, 12:01 AM

	F11036140: D8604.diff
	Wed, Aug 9, 7:00 PM

	F11025380: D8604.diff
	Wed, Aug 9, 12:51 AM

	F11018604: D8604.diff
	Sun, Aug 6, 1:27 PM

	F10971916: D8604.id20576.diff
	Fri, Jul 21, 9:22 AM

View All 15 Files

Subscribers

Details

Reviewers

Group Reviewers

Commits

R2816:348244019f7c: Update Riot to 1.5.15

Summary

Update Riot to 1.5.15

Changes:

Security:
- The jitsi.html widget wrapper introduced in Riot 1.5.14 could be used to extract user data by tricking the user into adding a custom widget or opening a link in the browser used to run Riot.
Bugfixes:
- Upgrade React SDK to 2.3.1 for Jitsi fixes
- Fix popout support for jitsi widgets

Test Plan

Sent a few messages, opened a Jitsi widget to make a conference call

Diff Detail

Repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

Staudey created this revision.Apr 1 2020, 5:06 PM

Herald added a reviewer: Triage Team. · View Herald TranscriptApr 1 2020, 5:06 PM

Staudey requested review of this revision.Apr 1 2020, 5:06 PM

Staudey added a project: Restricted Project.Apr 1 2020, 5:07 PM

LGTM, thanks. Given the proximity to sync, this will get landed tomorrow.

This revision is now accepted and ready to land.Apr 2 2020, 5:42 AM

Closed by commit R2816:348244019f7c: Update Riot to 1.5.15 (authored by Staudey, committed by JoshStrobl). · Explain WhyApr 2 2020, 5:42 AM

This revision was automatically updated to reflect the committed changes.

JoshStrobl added a commit: R2816:348244019f7c: Update Riot to 1.5.15.

Revision Contents
Changeset List

Path

Size

6 lines

pspec_x86_64.xml

69 lines

Diff 20576

package.yml

Loading...

pspec_x86_64.xml

Loading...