627910 - Update Release Notes for Bugzilla 4.0rc2

Status: RESOLVED FIXED

(Bugzilla :: Documentation, defect)

Comment 1

[Max Kanat-Alexander]

Attachment: v1

Comment 2

[Reed Loden [:reed]]

Comment on attachment 506003 [details] [diff] [review]
v1

>+  <li>[% terms.Bugzilla %] now sends the header
>+    <a href="https://developer.mozilla.org/en/the_x-frame-options_response_header"><code>X-Frame-Options: SAMEORIGIN</code></a>
>+    with every page request, to prevent "clickjacking" attacks. Note that
>+    this prevents other domains from putting [% terms.Bugzilla %]
>+    in an HTML frame.</li> 

How about (ignoring TT/html stuff, just text):
Bugzilla now sends the X-Frame-Options: SAMEORIGIN header with every page request in order to prevent "clickjacking" attacks.

>+<p>If your [% terms.Bugzilla %] runs under the Apache mod_perl,
>+  the required Apache configuration is now simpler. The line that used
>+  to look like:</p>

"the Apache mod_perl" sounds weird. Drop the "the", maybe?

Comment 3

[Max Kanat-Alexander]

Attachment: v2

Thanks! Fixed both those points.

Comment 4

[Reed Loden [:reed]]

Comment on attachment 506037 [details] [diff] [review]
v2

>+  <li>[% terms.Bugzilla %] now sends the
>+    <a href="https://developer.mozilla.org/en/the_x-frame-options_response_header"><code>X-Frame-Options: SAMEORIGIN</code></a> header
>+    with every page request in order to prevent "clickjacking" attacks. Note
>+    that this prevents other domains from putting [% terms.Bugzilla %]
>+    in an HTML frame.</li> 
> </ul>

Maybe "displaying" rather than "putting" here? Don't care, though.

r=reed

Comment 5

[Frédéric Buclin]

Comment on attachment 506037 [details] [diff] [review]
v2

> [% INCLUDE req_table reqs = OPTIONAL_MODULES
>-                     new  = ['JSON-XS']
>-                     updated = []
>+                     new  = ['JSON-XS', 'Win32-API']
>+                     updated = ['Apache-SizeLimit', 'SOAP-Lite']
>                      include_feature = 1 %]

Math::Random::Secure is not marked as a new module.

Comment 6

[Max Kanat-Alexander]

Ah, yeah, I agree that "displaying" is better. You are a really good copyeditor, reed. :-)

I also added MRS to the relnotes, thanks for catching that.

Committing to: bzr+ssh://bzr.mozilla.org/bugzilla/trunk/                       
modified template/en/default/pages/release-notes.html.tmpl
Committed revision 7666.

Committing to: bzr+ssh://bzr.mozilla.org/bugzilla/4.0/                         
modified template/en/default/pages/release-notes.html.tmpl
Committed revision 7522.