Topic: Mibew Messenger 3.0.0 has been released!

[faf]

Good news, everyone! The new major release of Mibew Messenger is ready!

1. Why this release is major?

It's because the enumeration of Mibew Messenger versions follows convention of semantic versioning.

We switched from Handlebars.js 3 to Handlebars.js 4 as the client side templates engine. It costed us nothing, all templates of our default theme stayed unchanged and works just fine. However due to some backwards incompatibility issues there could be some troubles with a third party themes.

2. Why the aforementioned change has been done?

Because of known vulnerability in the old version of Handlebars.js.

3. Are there any other changes since Mibew Messenger 2.3.0 release?

Nothing special, just a couple of bug fixes.

4. Is this update necessary?

Because of its nature related to security the update is highly recommended.

[Podn]

Hi,

"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?

[faf]

"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?

Yes. I don't believe that it could seriously affect the existing installations of Mibew Messenger, however the security is never enough.

[Podn]

Thank you!