[issue2551100] Replace jquery 1.3.2 with newer version - security issues
John Rouillard <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.devel |
|---|---|
| Message-ID | <[email protected]> |
New submission from John Rouillard: Replace with newest Update jquery.js in multiple locations: share/roundup/templates/responsive/html/jquery.js share/roundup/templates/devel/html/jquery.js version and test to make sure that it still works. GitHub code scanning reports bad sanitizing function to remove script tags, See: https://github.com/roundup-tracker/roundup/security/code- scanning/8?query=ref%3Arefs%2Fheads%2Fmaster https://github.com/roundup-tracker/roundup/security/code-scanning/3? query=ref%3Arefs%2Fheads%2Fmaster ---------- components: Web interface messages: 7021 nosy: rouilj severity: normal status: new title: Replace jquery 1.3.2 with newer version - security issues type: security versions: 2.0.0 _________________________________________________ Roundup tracker <[email protected]> <https://issues.roundup-tracker.org/issue2551100> _________________________________________________