intel / appframework

The definitive HTML5 mobile javascript framework
http://app-framework-software.intel.com/
MIT License
2.43k stars 881 forks source link

IOS8.4.1 CVE-2015-5759 block click event propagation #889

Closed Element-Dong closed 8 years ago

Element-Dong commented 9 years ago

After I updated my iphone to IOS 8.4.1, I found button like

   <a id="addtocart" class="button white">add to cart</a>

need to click twice to react the event such as

$(document).ready(function() {
    $('#addtocart').bind('click', function() {
        var product = new Product();
        product.addToCart();
    });

I guess the issue caused by CVE-2015-5759 WebKit Description: An issue existed in how synthetic clicks are generated from tap events that could cause clicks to target other pages. The issue was addressed through restricted click propagation.

Does someone experience the same?

Element-Dong commented 9 years ago

Verson:intel-appframework - v2.1.0 - 2014-03-25

imaffett commented 9 years ago

@Element-Dong - Can you try upgrading to App Framework 2.2? You may need to disable the touchlayer and use FastClick instead

Element-Dong commented 9 years ago

@imaffett thank you, I'll try it later.