search

FolioReader / FolioReader-Android

A Java ePub reader and parser framework for Android.
BSD 3-Clause "New" or "Revised" License
2.24k stars 715 forks source link

Google play console vulnerability alert #402

Open KateFacemetrics opened 4 years ago

KateFacemetrics commented 4 years ago

There is an Alert on Google play console saying that jquery-3.1.1 has known security issue and it should be updated to the latest version.

jquery-3.1.1.min.js is placed in the following folder: folioreader/src/main/assets/js/

Issue / Feature - FolioReader version - 0.5.4 FolioReader Stock / Modified -
Android SDK - Mobile / Tablet / Emulator Info -
Crash / Error -

Steps to reproduce / Describe in detail -

KishanViramgama commented 4 years ago

same problem but check this pull request #417

ashokkumar88 commented 4 years ago

@KishanViramgama Did you find any solution for this?

KishanViramgama commented 4 years ago

@ashokkumar88 check this pull request #417

lainara6-zz commented 4 years ago

@KishanViramgama did you solve this problem?

ashokkumar88 commented 4 years ago

@LayChannara i updated the jquery version to latest and rebuild it.

lainara6-zz commented 4 years ago

@ashokkumar88 Thanks

changloka commented 4 years ago

Hi, how did you update it to latest version? Cannot edit the files inside the epub jar files/library. Please list the steps on achieving this. thank you.

ashokkumar88 commented 4 years ago

@changloka the steps mentioned here. https://github.com/FolioReader/FolioReader-Android/issues/316#issuecomment-449940637

akhileshsharma commented 4 years ago

Anybody able to find a solution to Play Console Vulnerability alert? I am still looking for a solution. I downloaded code of library from git and it does include jquery verstion 3.4.1 but it still fetches jquery version 3.1.1 through implementation. How to fix?

@hrishikesh-kadam link provided for RootFolder does not work anymore so can not see what is done to fix.

mtamailindia commented 4 years ago

Hi, Will this issue also come when I will use only Dependency of folio reader not Add the downloaded Folio reader as Library ? I'm also getting this issue. I'm currently using downloaded code of folio reader library and added in my App as a library.

KishanViramgama commented 4 years ago

check this pull request #417