UKGovLD / registry-core

Linked data registry - core application and example UI
https://github.com/UKGovLD/registry-core/wiki
Apache License 2.0
23 stars 9 forks source link

upgrade jquery.min.js version used in registry software #125

Open zhangz555 opened 4 years ago

zhangz555 commented 4 years ago

We are trying to upgrade jquery.min.js version used in registry software here at NWS. Our target is version 3.5.0 or higher. The NVD reports that JQuery hosted on the remote web server prior to version 3.5.0 is subject to cross site scripting vulnerability, and suggests upgrading to 3.5.0 or later. See here https://nvd.nist.gov/vuln/detail/CVE-2020-11022

However, what we find out is that we can not make this work. What we tried is updating jquery.min.js file in folder /opt/ldregistry/ui/js/ and also updating the Githubissues.

  • Githubissues is a development platform for aggregating issues.