The third release candidate of Prototype 1.5.1 is released with many bugfixes, enhancements, and performance improvements. The new release come also with a security enhancement in response to the latest Fortify software's security paper allowing to strip delimiters before evaluating the JSON response.

Enhancements

• Ajax.Requests now supports per-request onCreate callbacks. [#8011]
• JSON strings are automatically stripped of their security delimiters (if present) before eval. More details on this security issue here (PDF document). [#7910]
• all toJSON methods now generate YAML-loadable JSON. [#7883]
• Event.element now returns an extended element. [#7870]
• Linefeed normalisation is now prevented in IE on String#escapeHTML and String#unescapeHTML for consistency with other browsers.
• Added a new Element.childElements method (shorter alias of Element.immediateDescendants).
• Added a new Element.firstDescendant method (same as using Element.down with no arguments).

Performance

• Faster $$() utility and Element.getElemementsBySelector method. [#7873], [#7901]
• Optimized Element.next, Element.down, Element.up and Element.previous DOM methods. [#7848]
• Speed improvements of String#escapeHTML and String#unescapeHTML in IE and Safari.

If all goes well, this will be the last release candidate before 1.5.1 final, so we're counting on your zealous testing and bug reporting.

Download: Prototype 1.5.1_rc3

HomePage

Prototype 1.5.1, RC3, Release Candidate 3, Java, Script, Javascript, Released