Horizon: security implication: not using triggers for .js updates

[Thomas Goirand]

The package should be using trigger to re-do the offline compress after a javascript library is updated. Otherwise, after a security update of a libjs-* package, Horizon will continue to use an old version of said libjs files.

Have a look into the Debian package to see how it is done if you want an example.

[Fuel Devops McRobotson (fuel-devops-robot)]

Fix proposed to branch: openstack-ci/fuel-7.0/2015.1.0
Change author: Vasyl Saienko <email address hidden>
Review: https://review.fuel-infra.org/7589

[Fuel Devops McRobotson (fuel-devops-robot)]

Fix proposed to branch: openstack-ci/fuel-6.1/2014.2
Change author: Vasyl Saienko <email address hidden>
Review: https://review.fuel-infra.org/7616

[Thomas Goirand (thomas-goirand)]

FYI, it looks like to me (after investigation), that for 7.0, we'll have to make new (or based on Sid) python-xstatic packages for:
- angular_mock
- bootstrap_datepicker
- font_awesome
- hogan
- jquery_migrate

and of course their corresponding libjs* packages.

[Fuel Devops McRobotson (fuel-devops-robot)]

Reviewed: https://review.fuel-infra.org/7616
Submitter: Igor Yozhikov <email address hidden>
Branch: openstack-ci/fuel-6.1/2014.2

Commit: a9266f1fed7669160f2471bd8f11aa5dcbe9305c
Author: Vasyl Saienko <email address hidden>
Date: Tue Jun 9 13:03:54 2015

Re-do offline compress after javascript lib or xstatic package is updated

  At the moment horizon compress static files once after install.
  Adding openstack-dashboard.triggers that will re-do offline compress
  if libjs-* or xstatic package is updated

Change-Id: I39ad62d9e21fa00f60c2398a7740891dec0bf876
Closes-Bug: #1462248

[Fuel Devops McRobotson (fuel-devops-robot)]

Change abandoned by Vasyl Saienko <email address hidden> on branch: openstack-ci/fuel-7.0/2015.1.0
Review: https://review.fuel-infra.org/7589

[Igor Yozhikov (iyozhikov)]

https://review.fuel-infra.org/#/c/8945/