Skip to content

Update vulnerable js libs#3348

Merged
mshibuya merged 1 commit into
railsadminteam:1.x-stablefrom
LukBrezina:update-js-libs
Apr 4, 2021
Merged

Update vulnerable js libs#3348
mshibuya merged 1 commit into
railsadminteam:1.x-stablefrom
LukBrezina:update-js-libs

Conversation

@LukBrezina

@LukBrezina LukBrezina commented Mar 18, 2021

Copy link
Copy Markdown
Contributor

Updating these vulnerable JS libs:

jQuery 1.12.4 (XSS) -> 3.x
Moment.js 2.10.6 (DoS) -> 2.29.1
Bootstrap 3.2.0 (XSS) -> 3.4.1

With the jQuery update I've had to also update jquery.pjax lib, add jQuery.migrate lib and did some tweaks to existing js code which was not working properly with jQuery3.

Tests are passing for just 1 environment – the failing tests seems to be unrelated to this update.

We did this update for our company project, on first sight everything seems to be working. However the update of jQuery to v3 is huge and it is possible it's breaking something in the admin. Will be glad for feedback in case we've missed some functionality.

@mshibuya mshibuya merged commit 036b2f5 into railsadminteam:1.x-stable Apr 4, 2021
@mshibuya

mshibuya commented Apr 4, 2021

Copy link
Copy Markdown
Member

Also applied to the master as 973dee0, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants