Mibew Messenger Community

General => Announcements => Topic started by: faf on November 30, 2017, 11:45:23 PM

Title: Mibew Messenger 3.0.0 has been released!
Post by: faf on November 30, 2017, 11:45:23 PM
Good news, everyone! The new major release of Mibew Messenger is ready!

1. Why this release is major?

It's because the enumeration of Mibew Messenger versions follows convention of semantic versioning.

We switched from Handlebars.js 3 to Handlebars.js 4 as the client side templates engine. It costed us nothing, all templates of our default theme stayed unchanged and works just fine. However due to some backwards incompatibility issues there could be some troubles with a third party themes.

2. Why the aforementioned change has been done?

Because of known vulnerability in the old version of Handlebars.js.

3. Are there any other changes since Mibew Messenger 2.3.0 release?

Nothing special, just a couple of bug fixes.

4. Is this update necessary?

Because of its nature related to security the update is highly recommended.
Title: Re: Mibew Messenger 3.0.0 has been released!
Post by: Podn on December 12, 2017, 09:01:28 AM
Hi,

"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?
Title: Re: Mibew Messenger 3.0.0 has been released!
Post by: faf on December 12, 2017, 02:15:21 PM
"Because of known vulnerability in the old version of Handlebars.js." - This is due to the vulnerability of XSS?

Yes. I don't believe that it could seriously affect the existing installations of Mibew Messenger, however the security is never enough.
Title: Re: Mibew Messenger 3.0.0 has been released!
Post by: Podn on December 13, 2017, 03:39:06 AM
Thank you!