Westwind.Globalization icon indicating copy to clipboard operation
Westwind.Globalization copied to clipboard

Published 20 hours ago • verified publisher icon RickStrahl

Obsolete AngularJS and JQuery scripts

Open nmg196 opened this issue 4 years ago • 2 comments

Hi, One of our sites which uses WestWind Globalization failed an annual pen test because it uses old versions of AngularJS and JQuery which have known security vulnerabilities. Has anyone attempted to upgrade AngularJS or JQuery to the current version?

Is this project still being maintained? There seem to be a lot of open issues and PRs and .NET Core 3.1 seems unsupported by default.

Thanks Nick

nmg196 avatar Jul 02 '20 11:07 nmg196

@nmg196 yeah there seems to not be much activity by the maintainer, but a "pre-release" was made on Nuget which adds support for .net core 3+ (see on Nuget)

lvmajor avatar Aug 12 '20 12:08 lvmajor

We have now upgraded this project to Angular to 1.8 but not submitted a PR yet as I doubt it will get merged. Let me know if you need it. The version on Github cannot be used in production due to the security vulnerabilites in Angular 1.4.2.

nmg196 avatar Aug 13 '20 11:08 nmg196