Closed fisharebest closed 9 years ago
This package includes jQuery 1.5.1, which contains a known XSS vulnerability - and my employer will not allow it to be installed.
This PR simply updates to the latest version of jQuery / jQuery-UI and also fetches them from the official jQuery CDN.
Hi, as I removed the www directory, this issue is closed :)
This package includes jQuery 1.5.1, which contains a known XSS vulnerability - and my employer will not allow it to be installed.
This PR simply updates to the latest version of jQuery / jQuery-UI and also fetches them from the official jQuery CDN.