search

RickStrahl / Westwind.Globalization

Database driven resource localization for .NET applications
544 stars 135 forks source link

Obsolete AngularJS and JQuery scripts #197

Open nmg196 opened 4 years ago

nmg196 commented 4 years ago

Hi, One of our sites which uses WestWind Globalization failed an annual pen test because it uses old versions of AngularJS and JQuery which have known security vulnerabilities. Has anyone attempted to upgrade AngularJS or JQuery to the current version?

Is this project still being maintained? There seem to be a lot of open issues and PRs and .NET Core 3.1 seems unsupported by default.

Thanks Nick

lvmajor commented 4 years ago

@nmg196 yeah there seems to not be much activity by the maintainer, but a "pre-release" was made on Nuget which adds support for .net core 3+ (see on Nuget)

nmg196 commented 4 years ago

We have now upgraded this project to Angular to 1.8 but not submitted a PR yet as I doubt it will get merged. Let me know if you need it. The version on Github cannot be used in production due to the security vulnerabilites in Angular 1.4.2.