Update jQuery - Githubissues

AspenWeb / pando.py

Filesystem dispatch + Simplates + Python = a nice web framework.

http://aspen.io/

Other

149 stars 38 forks source link

Update jQuery #579

Closed EdOverflow closed 7 years ago

EdOverflow commented 7 years ago

jQuery 1.5 has known vulnerabilities:

CVE-2011-4969: http://research.insecurelabs.org/jquery/test/
Selector interpreted as HTML: http://bugs.jquery.com/ticket/11290
3rd party CORS request may execute arbitrary code: http://blog.jquery.com/2016/01/08/jquery-2-2-and-1-12-released/

Changaco commented 7 years ago

The old website that contains a copy of jQuery 1.5 is no longer accessible (http://aspen.io/ now points to Read the Docs). It will be removed by #560.

EdOverflow commented 7 years ago

Oh, I see. It appears as though readthedocs.org is using an outdated version of jQuery too.

capture