codeforamerica / honeycrisp-gem

A Rails gem with base styles and Javascript for Code for America products
http://honeycrisp.herokuapp.com
MIT License
26 stars 8 forks source link

Upgrade version of jQuery #217

Closed luigi closed 3 years ago

luigi commented 4 years ago

A security audit for SHIBA surfaced that we're using an old version of jQuery with known security vulnerabilities:

https://snyk.io/test/npm/jquery/1.12.4

Because 1.12.4 was the last of the 1.x line, we'll need to upgrade to a newer (2.x or 3.x) release line. This may cause backwards-incompatibility.