search

alphagov / govuk-country-and-territory-autocomplete

An autocomplete widget that uses data from Country and Territory Register.
https://alphagov.github.io/govuk-country-and-territory-autocomplete/examples/
MIT License
38 stars 18 forks source link

Update version of jQuery #82

Open hannalaakso opened 3 years ago

hannalaakso commented 3 years ago

jQuery is currently being included as a sub-dependency of this component via openregister-picker-engine which includes corejs-typeahead.

As jQuery 3.2.1 has reported medium severity vulnerabilities, jQuery should be updated to the latest version 3.6.0 which has no reported vulnerabilities.

The compiled files in dist/ should then be re-built and a new version released.

tmc-ee commented 2 years ago

Any update on when this change might be approved? We're getting a security alert for this when running ZAP checks on PPT.