Use out-of-tree CodePress
Bug #492410 reported by
Nick Chadwick
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| IVLE |
Fix Released
|
Medium
|
William Grant | ||
Bug Description
Projects which include third-party packages in their source trees make Baby
Jesus and security people like me cry.
We need to get our CodePress changes upstream and be able to use an
out-of-tree version.
Related branches
Revision history for this message
| Matt Giuca (mgiuca) wrote | #1 |
| tags: | added: js refactor |
| Changed in ivle: | |
| assignee: | William Grant (wgrant) → nobody |
Revision history for this message
| David Coles (dcoles) wrote | #2 |
| Changed in ivle: | |
| assignee: | nobody → David Coles (dcoles) |
| milestone: | none → 1.0.2 |
Revision history for this message
| David Coles (dcoles) wrote | #3 |
| Changed in ivle: | |
| status: | Triaged → In Progress |
Revision history for this message
| William Grant (wgrant) wrote | #4 |
| Changed in ivle: | |
| assignee: | David Coles (dcoles) → William Grant (wgrant) |
Revision history for this message
| William Grant (wgrant) wrote | #5 |
| Changed in ivle: | |
| status: | In Progress → Fix Committed |
| Changed in ivle: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
This is medium priority. Unlike phpBB, CodePress doesn't present security
vulnerabilities, is much smaller, and doesn't have its own deb package. So it's
'okay' for it to hang around in our source tree a while longer.
The plan to fix is:
1. Update our code to the latest version of CP (apparently refactored a lot).
2. Get our changes pushed upstream (they are not IVLE-specific).
3. Create a deb package for CodePress (this will be stored in the IVLE repository for
the foreseeable future).
4. Have IVLE depend upon this deb package instead.