Time to upgrade

news.. new.. news..  need to updrade now..

A kind soul informed us that the Not Found error page can be exploited via inserting javascript code in the address bar. This release provides a fix for this vulnerability. This release also includes some other improvements to the bake script and prepares for the day when the controller object is not available in the view. Cakebaker mentioned the addition of the session helper. It is recommended that everyone upgrade and change all references to $this->controller->Session in the view to the new helper, $session.

About these ads