cloudfoundry-incubator/admin-ui — pull request #82 by jackfengibm (2014-06-20 17:34:36+00:00)
Title: gave a permanent fix to the security issue of allowScriptAccess in ZeroC...

ZeroClipboard.js in the jquery plugin called 'DataTools' currently has allowScriptAccess set to 'always'. This is a security bug which allows script injection issue to pop-up, mainly from other web sites that the user may have visited. A fix to this issue to set
the allowScriptAccess flag to 'never'. This PR aims at giving a permanent solution which can survive in future updates of DataTools until the implementation of getHTML method is changed. This fix also allows users who wish the upgrade DataTools on their own environment to take advantage of the fixes without making code level changes.