badger icon indicating copy to clipboard operation
badger copied to clipboard

chore(Docs): Update jQuery 3.2.1 to 3.7.1

Open kokizzu opened this issue 1 year ago • 7 comments

Problem

Hugo docs imports outdated version of jQuery that have security issues

Fixes mend security scan: https://www.mend.io/vulnerability-database/CVE-2020-23064 https://www.mend.io/vulnerability-database/CVE-2020-11023 https://www.mend.io/vulnerability-database/CVE-2020-11022 https://www.mend.io/vulnerability-database/CVE-2019-11358 https://www.mend.io/vulnerability-database/CVE-2015-9251

image

Solution

just need update the jquery and release a new version that won't block CI

-   <script src="//code.jquery.com/jquery-3.2.1.min.js" integrity="sha256-hwg4gsxgFZhOsEEamdOYGBf13FyQuiTwlAQgxVSNgt4=" crossorigin="anonymous"></script>
+   <script src="//code.jquery.com/jquery-3.7.1.min.js" integrity="sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=" crossorigin="anonymous"></script>

kokizzu avatar Oct 20 '23 20:10 kokizzu

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Oct 20 '23 20:10 CLAassistant

@billprovince @joshua-goldstein

kokizzu avatar Oct 24 '23 23:10 kokizzu

Any updates on this?

bogdanprodanj avatar Nov 06 '23 19:11 bogdanprodanj

Could you change the base branch to main? Master is deprecated.

joshua-goldstein avatar Dec 01 '23 21:12 joshua-goldstein

Deploy Preview for badger-docs ready!

Name Link
Latest commit 11ba6e89c6eb1a672b47def7d824bf1b8a8a8379
Latest deploy log https://app.netlify.com/sites/badger-docs/deploys/669f54ebcb80630008e9c818
Deploy Preview https://deploy-preview-2023--badger-docs.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

netlify[bot] avatar Dec 02 '23 05:12 netlify[bot]

done @joshua-goldstein

kokizzu avatar Dec 02 '23 05:12 kokizzu

bump @billprovince @joshua-goldstein

kokizzu avatar May 28 '24 17:05 kokizzu

Any update on when a new version using jquery-3.7.1.min.js will be released?

rcogan-ns1 avatar Jul 16 '24 17:07 rcogan-ns1

@kokizzu could you rebase the changes on latest main so that the tests can run again please? Otherwise, the PR is good to go.

mangalaman93 avatar Jul 23 '24 05:07 mangalaman93

done @mangalaman93

kokizzu avatar Jul 23 '24 07:07 kokizzu