Update /app/webroot/js/vendors.php!
Today, a possible security exploit has been reported (see ticket 1429 for details). In the meantime a fix is available. To fix the problem you have to replace /app/webroot/js/vendors.php with the version from trunk.
Update (2006-09-18): Replace also /cake/scripts/templates/skel/webroot/js/vendors.php.




We only need to replace that second one within the cake directory if it’s web-accessible, from what I understand. I’m running my server with webroot as the public document root of the apache server, so I think I’m okay?
Correct me, if I’m wrong.
You have to update the file within the cake directory if you create the application skeletons with the bake script.
Ah. Gotcha. Thanks.