Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ENDOC-567 Add Breaking Changes section with note on javascript module… #560

Merged
merged 3 commits into from
Sep 1, 2022

Conversation

nshaw
Copy link
Contributor

@nshaw nshaw commented Aug 31, 2022

…s, reorganize release notes.

- Fixed CVE-2022-33879 (apache tika, DoS)
- Fixed CVE-2022-24823 (apache netty, Information Exposure)
## Breaking Changes
* Improvements to the MFE framework in Entando 7.1 rely on loading MFEs as [Javascript modules](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules#other_differences_between_modules_and_standard_scripts). Older MFEs may need to be upgraded to avoid the use of SPA-style runtime files which will prevent this from working.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

JavaScript

- Fixed CVE-2022-24823 (apache netty, Information Exposure)
## Breaking Changes
* Improvements to the MFE framework in Entando 7.1 rely on loading MFEs as [Javascript modules](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules#other_differences_between_modules_and_standard_scripts). Older MFEs may need to be upgraded to avoid the use of SPA-style runtime files which will prevent this from working.
* The latest [Create React App](https://create-react-app.dev/) defaults to this mode so upgrading (e.g. `npx install react-scripts@latest`) may be all that is required.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"...mode, so..."

- Fixed CVE-2022-33879 (apache tika, DoS)
- Fixed CVE-2022-24823 (apache netty, Information Exposure)
## Breaking Changes
* Improvements to the MFE framework in Entando 7.1 rely on loading MFEs as [JavaScript modules](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules#other_differences_between_modules_and_standard_scripts). Older MFEs may need to be upgraded to avoid the use of SPA-style runtime files which will prevent this from working.
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would change it as above:

Improvements to the AppBuilder's MFE framework in Entando 7.1 rely on loading MFEs as JavaScript modules. Older widget configuration MFEs may need to be upgraded to avoid the use of SPA-style runtime files which will prevent this from working.

@nshaw nshaw merged commit ac8742f into main Sep 1, 2022
@nshaw nshaw deleted the ENDOC-567-add-note-re-script-modules branch September 1, 2022 14:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants