search

UCL-INGI / INGInious

INGInious is a secure and automated exercises assessment platform using your own tests, also providing a pluggable interface with your existing LMS.
http://www.inginious.org
Other
202 stars 139 forks source link

[frontend] Update JS libraries #963

Open javawolfpack opened 1 year ago

javawolfpack commented 1 year ago

Describe the bug Can I get a list of all the JS libraries in the all-minified.js file?

I know there are the following:

But that is not all of them, as trying to make an updated file version broke parts of the site. But need to be updated as at least those two are reasonably outdated with known vulnerabilities that my campus IT security scanning is giving me trouble about. Short-term a list of what libraries is in that monolith file would be a quick fix, long term, either separate files, better documentation, or update the static files to have newer versions of the libraries.

INGInious installation details

To Reproduce Steps to reproduce the behavior:

  1. Install 0.8.7 as comes with the outdated libraries

Expected behavior Mentioned above, should have versions of the JS libraries without vulnerabilities.

Screenshots N/A

Desktop (please complete the following information): N/A

Additional context Hopefully has already be covered.

Drumor commented 1 year ago

Hello @javawolfpack,

I think what you're looking for is our grunt configuration here

This give you an idea of what is inside our minify file.

Let me know if it's ok for you.

Best

javawolfpack commented 1 year ago

That should be enough for me to update locally 🤞 But ideally long term would be updated in the official version too.