search

USGS-WiM / sparrow-eastern-us-js

Eastern United States NHD model
Other
2 stars 0 forks source link

Remediate Vulnerability: Outdated Javascript Library #72

Closed aaronstephenson closed 2 years ago

aaronstephenson commented 3 years ago

Acunetix scan reports this app is using jQuery 1.7 and should be updated. This is a Medium vulnerability and should be a priority.

Note that Acunetix reported this for the website hosted at sparrow.wim.usgs.gov, so not specifically this eastern us mapper, but the splash page. It reports the specific library as

https://ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.js

so this is probably just script tag in your HTML file that needs to be updated.

esmyers commented 2 years ago

Fixed this at the sparrow.wim.usgs.gov/index.html page by referencing Jquery 3.6.0. We may still want to get rid of this page as I think it should probably redirect to the official NAWQA page. https://water.usgs.gov/nawqa/sparrow/ Will confirm this and create a new issue at a later time.