May I know if backdrop vulnerable to the Log4shell/Log4j (CVE-2021-44228) in any stage or version or third party plugin found vulnerable to this ? Is there any official statement from backdrop on this ? I need a firm answer on this. Thanks.
Backdrop is definitely not vulnerable because of Log4j. Log4j is a Java component; Backdrop doesn't directly use Java, it's written in PHP, HTML, and JavaScript, with a smattering of scripting languages and configurations.
Note: I don't speak officially for Backdrop, but I'm pretty confident about this.
It looks like the minify module is not properly processing your JS and HTML files. Have you checked the file paths and permissions to ensure they are accessible? I remember, that once I faced...
I figured the space part of it out, but caption length is still limited to about 125 characters. - #CboxContent: margin-bottom expands it just enough and doesn't disrupt the counter or arrows...
Hello,
Indeed, there is no more field than "login" and "mail address" (and password) in the "Create new user".
It seems indeed to be a bug, unsure if someone can reproduce on a fresh...
Does backdrop have a super admin that's different than users assigned the administrator role?
Sort of. Backdrop has an administer role that can be granted specific...
Comments
Backdrop is definitely not vulnerable because of Log4j. Log4j is a Java component; Backdrop doesn't directly use Java, it's written in PHP, HTML, and JavaScript, with a smattering of scripting languages and configurations.
Note: I don't speak officially for Backdrop, but I'm pretty confident about this.
I'm glad to hear this. Thanks for your affirmation.