The third release candidate of Prototype 1.5.1 just
released today with many bugfixes, enhancements, and performance improvements. The new release come also with a security enhancement in response to the latest
Fortify software's security paper allowing to strip delimiters before evaluating the
JSON response. From the
changelog :
- Faster $$() utility and Element.getElemementsBySelector method
- Optimized Element.next, Element.down, Element.up and Element.previous DOM methods
- Speed improvements of String#escapeHTML and String#unescapeHTML in IE and Safari.
- JSON strings are automatically stripped of their security delimiters (if present) before eval.
- Ajax.Requests now supports per-request onCreate callbacks
- all toJSON methods now generate YAML-loadable JSON
- Ajax responses with no Content-type header are no longer evaluated
Subscribe to AJAX Magazine's feed