{"push_id":1012631412,"size":9,"distinct_size":4,"ref":"refs/heads/master","head":"9f2dc64db7d1a64f7e9a83444d2edc9152594a19","before":"64531f4e131f888ad6350c943ffae5045cd34968","commits":[{"sha":"a0e934938d2e37f2bbf0c444f709c6cb744a64be","author":{"email":"cbf1fdb16cffc63fde637be6e23cbb068f466e6b@pentaho.com","name":"ddiroma"},"message":"[BACKLOG-6892] 6.1 Localization for PUC","distinct":true,"url":"https://api.github.com/repos/afrjorge/cdf/commits/a0e934938d2e37f2bbf0c444f709c6cb744a64be"},{"sha":"289a3057a7240d4a83ed9a69dffefdc723735f08","author":{"email":"f502e31d11dbb277d5fe71517ed4ecca1a0a5b28@webdetails.pt","name":"André Jorge"},"message":"[PPP-3450] Backbone.js vulnerable to DOM XSS\n    - upgrade CDF AMD lib backbone 1.1.2 -> 1.2.3\n    - upgrade CDF AMD lib underscore 1.6.0 -> 1.8.3","distinct":false,"url":"https://api.github.com/repos/afrjorge/cdf/commits/289a3057a7240d4a83ed9a69dffefdc723735f08"},{"sha":"e74f3a578393e75a1f273785e767697a23f5863f","author":{"email":"f502e31d11dbb277d5fe71517ed4ecca1a0a5b28@webdetails.pt","name":"André Jorge"},"message":"[PPP-3450] Backbone.js vulnerable to DOM XSS\n    - update CDF AMD _.template usage according to the new syntax","distinct":false,"url":"https://api.github.com/repos/afrjorge/cdf/commits/e74f3a578393e75a1f273785e767697a23f5863f"},{"sha":"ea1c3e549031acc1f4da1999d0ea586b75ad354e","author":{"email":"f502e31d11dbb277d5fe71517ed4ecca1a0a5b28@webdetails.pt","name":"André Jorge"},"message":"[PPP-3450] Backbone.js vulnerable to DOM XSS\n    - CDF AMD adds the property initInstance to components dynamically, so it might not have been set when the dashboard init function executes. Using _.filter because _.where uses _.matcher that creates a shallow clone and only iterates over own properties.","distinct":false,"url":"https://api.github.com/repos/afrjorge/cdf/commits/ea1c3e549031acc1f4da1999d0ea586b75ad354e"},{"sha":"521b92865110a4a77436af3be131b39505963c3b","author":{"email":"f502e31d11dbb277d5fe71517ed4ecca1a0a5b28@webdetails.pt","name":"André Jorge"},"message":"[PPP-3450] Backbone.js vulnerable to DOM XSS\n    - FilterComponent: Improve Manager's close logic. It should be each node's responsibility to close/empty its children, we shouldn't have to `walk-down` the tree to do it.\n    - Fixes issues regarding sparse arrays not being supported in the CDF AMD underscore version. We cannot dynamically change an array we're iterating upon, as was being done in the Manager#close function.","distinct":false,"url":"https://api.github.com/repos/afrjorge/cdf/commits/521b92865110a4a77436af3be131b39505963c3b"},{"sha":"3babdbfc7b08ac6f08789e52051b037b6cebf1eb","author":{"email":"ff878b1dcc1bda5cdb5643dacaa3b30c46f94d62@gmail.com","name":"Pedro Vale"},"message":"Merge pull request #812 from ddiroma/dev\n\n[BACKLOG-6892] 6.1 Localization for PUC","distinct":true,"url":"https://api.github.com/repos/afrjorge/cdf/commits/3babdbfc7b08ac6f08789e52051b037b6cebf1eb"},{"sha":"f62c7c2fe827c4d4d6956c933e00f9c22d8dfbd3","author":{"email":"b0fd68d1a8072f2e37f0b02862de3b80ff371679@pentaho.com","name":"buildguy"},"message":"[CLEANUP] updated versions via release version merger","distinct":true,"url":"https://api.github.com/repos/afrjorge/cdf/commits/f62c7c2fe827c4d4d6956c933e00f9c22d8dfbd3"},{"sha":"d717a63918a1b151db443078c3f3155bb3bf98d1","author":{"email":"f502e31d11dbb277d5fe71517ed4ecca1a0a5b28@webdetails.pt","name":"André Jorge"},"message":"[PPP-3450] Backbone.js vulnerable to DOM XSS\n    - Removed unused Backbone.Router and Backbone.History modules in CDF legacy lib","distinct":false,"url":"https://api.github.com/repos/afrjorge/cdf/commits/d717a63918a1b151db443078c3f3155bb3bf98d1"},{"sha":"9f2dc64db7d1a64f7e9a83444d2edc9152594a19","author":{"email":"ff878b1dcc1bda5cdb5643dacaa3b30c46f94d62@gmail.com","name":"Pedro Vale"},"message":"Merge pull request #816 from afrjorge/PPP-3450\n\n[PPP-3450] Backbone.js vulnerable to DOM XSS","distinct":true,"url":"https://api.github.com/repos/afrjorge/cdf/commits/9f2dc64db7d1a64f7e9a83444d2edc9152594a19"}]}