avro icon indicating copy to clipboard operation
avro copied to clipboard

Upgrade jquery to 3.7.1 due to CVE-2019-11358

Open patrickhayesrel opened this issue 1 month ago • 3 comments

What is the purpose of the change

Our security scanning software has found some security issues, so we want to update the relevant version library, fixing AVRO-4213.

Verifying this change

This change is a trivial rework / code cleanup without any test coverage.

Documentation

  • Does this pull request introduce a new feature? No

patrickhayesrel avatar Nov 25 '25 17:11 patrickhayesrel

The changes look good but someone has to test the webapp in action and verify that there are no JavaScript errors in the dev console.

I was wondering if the tests had enough coverage to determine this. Have never used this application before (just a downstream consumer via Spark) but happy to help prove this out if need be.

patrickhayesrel avatar Nov 25 '25 22:11 patrickhayesrel

I was wondering if the tests had enough coverage to determine this.

There are no UI tests.

martin-g avatar Nov 26 '25 06:11 martin-g

I think this is a smart thing to do -- but it's tricky to check out the UI. I'm not sure I'm capable of doing this! Does anybody still have an idea how they work? We might need to just retire that functionality.

RyanSkraba avatar Dec 02 '25 19:12 RyanSkraba