Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update vulnerable js libs #3348

Merged
merged 1 commit into from
Apr 4, 2021

Conversation

luki215
Copy link
Contributor

@luki215 luki215 commented Mar 18, 2021

Updating these vulnerable JS libs:

jQuery 1.12.4 (XSS) -> 3.x
Moment.js 2.10.6 (DoS) -> 2.29.1
Bootstrap 3.2.0 (XSS) -> 3.4.1

With the jQuery update I've had to also update jquery.pjax lib, add jQuery.migrate lib and did some tweaks to existing js code which was not working properly with jQuery3.

Tests are passing for just 1 environment – the failing tests seems to be unrelated to this update.

We did this update for our company project, on first sight everything seems to be working. However the update of jQuery to v3 is huge and it is possible it's breaking something in the admin. Will be glad for feedback in case we've missed some functionality.

@mshibuya mshibuya merged commit 036b2f5 into railsadminteam:1.x-stable Apr 4, 2021
@mshibuya
Copy link
Member

mshibuya commented Apr 4, 2021

Also applied to the master as 973dee0, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants