[Cosmo-dev] [Sum] Jul 8-14

[Ted Leung]

Here's the summary of the activity on cosmo-dev for the week of July  
8, 2007.

New threads:
-------

Tim Pokorny posted an update on his Cometd project
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004091.html>

Randy Letness started a page for Cosmo 0.7 performance
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004092.html>

Mikeal Rogers reported that Cosmo 0.6.1.1 was signed off
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004095.html>

Jared Rhine posted an update on the status of Cosmo 0.6.1.1
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004096.html>

Alex Dragusin posted an update on the status of his remote  
subscription project
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004102.html>

Jared Rhine posted a series of bugs which combined to corrupt the  
OSAF office calendar.  From the ensuing discussion, it appeared that  
a Chandler desktop bug was the primary culprit
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004104.html>

"Items in multiple collections, again"
Randy Letness reported that if two Chandler Dekstops import the  
same .ics file and the publish the result collections, the items in  
the two collections will be shared.  This revived the items in  
multiple collections discussion, and two possible solutions were  
discussed.  Solution 1 was for Chandler desktoip to generate random  
UUID's for items in imported .ics files.  Solution 2 (which is on the  
long term roadmap for Cosmo) was to implement a better security model  
for Cosmo.
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004109.html>

Ted Leung asked for suggestions on how to do a security review of the  
Cosmo codebase and got the standard answer: "have friends in the  
security business look at it".
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004119.html>

Ted Leung reported that he moved all the p3, p4, p5 bugs to Future.
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004129.html>

"Cosmo Version Numbers"
Ted Leung noted that the plan of record was for Cosmo 0.7.1 to focus  
on fixing interoperability bugs.   He proposed pushing that work into  
a Cosmo 0.8 and to use the Cosmo 0.7.x numbers for bug fix only  
releases after Preview.   People agreed and Ted made the changes in  
bugzilla.   As a detour, Katie Parlante also offered a list of bugs  
that she thought could be dropped from the Cosmo 0.7 release,  
including dropping (until Cosmo 0.7.1) any Safari related bugs.
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004133.html>

Matthew Eernisse posted a pointer to someone's experience porting  
from Dojo 0.4 to Dojo 0.9
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004148.html>

"Items in multiple collections for preview"
After the discussion of items in multiple collections, prompted by  
the .ics file issue (see above), Katie Parlante posted a summary of  
all the issues at hand, and proposed that for Preview, Chandler  
Desktop should generate random UUID's, and that changes to the Cosmo  
security model be deferred until after Preview.
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004149.html>

"Visited Link color"
Matthew Eernisse proposed not changing the color for a visited link,  
since the semantics of a visited link are kind of blurry in a web  
application like the Cosmo UI
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004153.html>

Travis Vachon posted a note clarifying the use of deferred errbacks  
vs Javascript try/catch blocks
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004155.html>

"XSS and Cosmo UI"
Travis Vachon started a thread about XSS issues with the Cosmo UI.    
The discussion that followed touched the severity of the problem  
(different people had different view),  instance by instance fixes vs  
a who top to bottom review, and different methods of solving XSS  
problems in the calendar vs list views.
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004156.html>


Continuing Conversations:
-------

Brian Moseley couldn't get Tim Pokorny's Comet demo to run
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004090.html>


Meetings, Announcements:
-------

Cosmo 0.6.1.1 release announcement
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004127.html>

Cosmo Release Meeting 7/11/2007 notes
<http://lists.osafoundation.org/pipermail/cosmo-dev/2007-July/ 
004126.html>