Prototype 1.5.1 Release candidate 3

The third release candidate of Prototype 1.5.1 is released with many bugfixes, enhancements, and performance improvements. The new release come also with a security enhancement in response to the latest Fortify software's security paper allowing to strip delimiters before evaluating the JSON response. Enhancements Ajax.Requests now supports per-request onCreate callbacks. [#8011] JSON strings are automatically stripped of […]

The third release candidate of Prototype 1.5.1 is released with many bugfixes, enhancements, and performance improvements. The new release come also with a security enhancement in response to the latest Fortify software's security paper allowing to strip delimiters before evaluating the JSON response.

Enhancements

  • Ajax.Requests now supports per-request onCreate callbacks. [#8011]
  • JSON strings are automatically stripped of their security delimiters (if present) before eval. More details on this security issue here (PDF document). [#7910]
  • all toJSON methods now generate YAML-loadable JSON. [#7883]
  • Event.element now returns an extended element. [#7870]
  • Linefeed normalisation is now prevented in IE on String#escapeHTML and String#unescapeHTML for consistency with other browsers.
  • Added a new Element.childElements method (shorter alias of Element.immediateDescendants).
  • Added a new Element.firstDescendant method (same as using Element.down with no arguments).

Performance

  • Faster $$() utility and Element.getElemementsBySelector method. [#7873], [#7901]
  • Optimized Element.next, Element.down, Element.up and Element.previous DOM methods. [#7848]
  • Speed improvements of String#escapeHTML and String#unescapeHTML in IE and Safari.

If all goes well, this will be the last release candidate before 1.5.1 final, so we're counting on your zealous testing and bug reporting.

Download: Prototype 1.5.1_rc3

HomePage

Prototype 1.5.1, RC3, Release Candidate 3, Java, Script, Javascript, Released