This is a migrated thread and some comments may be shown as answers.

Cordova Vulnerability

1 Answer 68 Views
Apache Cordova
This is a migrated thread and some comments may be shown as answers.
This question is locked. New answers and comments are not allowed.
Ethan
Top achievements
Rank 1
Ethan asked on 28 Aug 2014, 02:23 PM
There is a new Cordova vulnerability that was published earlier this month. The mitigation includes updating to Cordova 3.5.1. However, the latest version that is available from AppBuilder is 3.5.0, which is still vulnerable. I know Telerik only integrates every other major version into AppBuilder, but considering the vulnerability, is it possible to integrate Cordova 3.5.1 into AppBuilder?

1 Answer, 1 is accepted

Sort by
0
Martin
Telerik team
answered on 28 Aug 2014, 04:03 PM
Hi Ethan,

We integrated and tested Cordova 3.5.1 immediately after its official release. However, we discovered some breaking changes due to the tightened security of the WebView. Most notably, jsHybugger plugin stopped working  and even crashed on some devices.

The crashes have been resolved and we reported an issue in jsHybugger and despite the fact that it still isn't fixed, we intend to upgrade to Cordova 3.5.1 for Android with our v2.5 release which is scheduled for Sept 9th.

Best regards,
Martin
Telerik
 

Visit the Telerik Verified Plugins Marketplace and get the custom Cordova plugin you need, already tweaked to work seamlessly with AppBuilder.

 
Tags
Apache Cordova
Asked by
Ethan
Top achievements
Rank 1
Answers by
Martin
Telerik team
Share this question
or