search

mathquill / mathquill

Easily type math in your webapp
http://mathquill.com
Mozilla Public License 2.0
2.61k stars 687 forks source link

JQuery update version #1001

Closed hellnhell closed 1 year ago

hellnhell commented 1 year ago

I'm having security issues in my web because of the library using an old version of jQuery (jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed). It's recommended to update to 3.5.0 or later. Can anybody do this?

jwmerrill commented 1 year ago

Mathquill does not bundle its own copy of jQuery. Users of the library are required to provide their own jQuery. So you should be able to upgrade jQuery independently, without upgrading mathquill.