Browse Source

web/ui: bump jQuery to 3.5.1 for the legacy UI (#7447)

jQuery prior to 3.4.0 is affected by an Object.prototype pollution
vulnerability (CVE-2019-11358). Even though our code doesn't seem to be
vulnerable to the issue, lets upgrade to the latest jQuery release so we
don't have to bother.

Signed-off-by: Simon Pasquier <spasquie@redhat.com>
pull/7461/head
Simon Pasquier 4 years ago committed by GitHub
parent
commit
cf6890a3a8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 2
      web/ui/static/vendor/js/jquery-3.3.1.min.js
  2. 2
      web/ui/static/vendor/js/jquery-3.5.1.min.js
  3. 4
      web/ui/static/vendor/js/jquery.min.js
  4. 2
      web/ui/templates/_base.html

2
web/ui/static/vendor/js/jquery-3.3.1.min.js vendored

File diff suppressed because one or more lines are too long

2
web/ui/static/vendor/js/jquery-3.5.1.min.js vendored

File diff suppressed because one or more lines are too long

4
web/ui/static/vendor/js/jquery.min.js vendored

File diff suppressed because one or more lines are too long

2
web/ui/templates/_base.html

@ -5,7 +5,7 @@
<meta name="robots" content="noindex,nofollow">
<title>{{ pageTitle }}</title>
<link rel="shortcut icon" href="{{ pathPrefix }}/static/img/favicon.ico?v={{ buildVersion }}">
<script src="{{ pathPrefix }}/static/vendor/js/jquery-3.3.1.min.js?v={{ buildVersion }}"></script>
<script src="{{ pathPrefix }}/static/vendor/js/jquery-3.5.1.min.js?v={{ buildVersion }}"></script>
<script src="{{ pathPrefix }}/static/vendor/js/popper.min.js?v={{ buildVersion }}"></script>
<script src="{{ pathPrefix }}/static/vendor/bootstrap-4.3.1/js/bootstrap.min.js?v={{ buildVersion }}"></script>

Loading…
Cancel
Save