Upgraded to jQuery 3.2.1
Google's auditing tool in chrome notified me that jquery 1.7.2 has two known XSS vulns and this marked the page down (it probably marks down our Page Rank as well). I've upgraded us to the latest and greatest. I did a cursory check of our existing JS code to see if anything was broken. I didn't see anything, and we weren't doing anything complicated with jQuery anyway.
Moved to jQuery's recommended CDN which supports integrity checks.
jQuery vulnerabilities: https://snyk.io/vuln/npm:jquery#[email protected]
+1, we definitely need to get this in. Security vulnerabilities are Not Good, both in the sense of security, and also from a marketing / PR perspective.
We're probably not affected but it's still an obviously good idea to update.
However, this updates across two major versions, which IIRC have breaking changes. We should either test thoroughly that all dynamic content on the site still works, or just elect to update to the latest minor version (1.12.14, it seems).
You need to update posix.mak BTW.
Thanks for your pull request, @JackStouffer!
Bugzilla references
Your PR doesn't reference any Bugzilla issue.
If your PR contains non-trivial changes, please reference a Bugzilla issue or create a manual changelog.
btw @wilzbach the certificate for https://contribs.dlang.io seems to be out of date.
Closing. No longer interested