search

timbunce / devel-nytprof

Devel::NYTProf is a powerful feature-rich source code profiler for Perl. (Mostly in maintenance mode, so PRs are much more likely to be acted upon than Issues.)
http://blog.timbunce.org/tag/nytprof/
67 stars 51 forks source link

jquery vulnerabilities #132

Open mrmuskrat opened 5 years ago

mrmuskrat commented 5 years ago

jquery 1.12.4 has two known vulnerabilities. You should update to jquery 3.4.0 or later.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9251 fixed by jquery 3.0.0

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11358 fixed by jquery 3.4.0

http://jquery.com/download/ is showing 3.4.1 as the latest version.

jQuery CDN https://code.jquery.com/jquery-3.4.1.min.js

rurban commented 5 years ago

I got the same warning here https://github.com/perl11/cperl/issues/398 from Whitesource, nice tool. Unfortunately a simple upgrade to 3.4.1 will destroy the table header layout, it will be at position 0,0, not at the table anymore. something with jquery.floatThead I guess The recommended migration helper didn't help much, so I fear this needs a javascript programmer to fix.

The problem is only if the generated pages are public.

[UPDATE] figured it out. Only some css names changed. See #133