A critical security fix
We were notified about the critical security bug in Total.js framework. Read a prevention.
A critical security fix for Total.js framework
We were noticed about the critical security bug in Total.js framework, but you are safe if you use a reverse proxy like NGINX or Apache. I'm very grateful for great analyse from security experts Riccardo Krauter, Dario Ragno, Fabio Cogno @ Certimeter Group. So thank you a lot!
The fix below is for all version of Total.js framework between v1.7
and v3.1
version. Just copy security.js
file to definitions
folder, for example: /your-app-dir/definitions/security.js
.
- download fix security.js
- and copy it to
/your-app/definitions/security.js
- restart app
Sorry for all troubles.
NEW UPDATE: read comments here https://github.com/totaljs/framework/commit/de16238d13848149f5d1dae51f54e397a525932b
Other posts from Total.js Platform
- 2024-04-19NEWInstalling Total.js v5: A Comprehensive Guide
- 2024-04-08How to create REST API using Total.js LessCode
- 2024-04-04Create UI parts visually with the power of Total.js UI Builder
- 2024-04-03Enhance your applications with Total.js v5 proxy functionality
- 2024-04-01March report 2024
- 2024-03-22How to scale your Total.js application with clusterization?
- 2024-03-01February report 2024
- 2024-02-19Building a CRUD API with Total.js: A Step-by-Step Guide
- 2024-02-01January report 2024
- 2024-01-18LessCode app