In the same vein, I'd like to update the master branch to use jQuery 3.5.0. While optional for now, this will soon (1-2 days) become a requirement for the WA module to function correctly. Local testing shows that the upgrade is innocuous.
--Misagh ----- Original Message ----- > From: "Colm O hEigeartaigh" <[email protected]> > To: "dev" <[email protected]> > Sent: Thursday, April 23, 2020 12:10:28 PM > Subject: Re: Jquery version on 2.1.x/2.0.x > That's great, thanks! > > Colm. > > On Thu, Apr 23, 2020 at 8:35 AM Francesco Chicchiriccò <[email protected]> > wrote: > >> On 23/04/20 08:58, Francesco Chicchiriccò wrote: >> > On 23/04/20 08:51, Colm O hEigeartaigh wrote: >> >> Is it possible to update the JQuery version on 2.1.x/2.0.x to the same >> >> version as on master? (3.4.1). It seems the existing version is >> vulnerable >> >> to https://nvd.nist.gov/vuln/detail/CVE-2019-11358 >> > Hi Colm, >> > I don't see issue. Let me do some local tests to confirm and I'll revert >> here. >> > >> > Regards. >> >> Found no issues, proceeded with upgrade: >> >> * 2_0_X: >> https://github.com/apache/syncope/commit/8ec6c23498aa058860024a2940b8d3104b4be7d6 >> * 2_1_X: >> https://github.com/apache/syncope/commit/40bb5d7fe3790a5a66743d8473de0976bb2780b7 >> >> Regards. >> >> -- >> Francesco Chicchiriccò >> >> Tirasa - Open Source Excellence >> http://www.tirasa.net/ >> >> Member at The Apache Software Foundation >> Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail >> http://home.apache.org/~ilgrosso/ >>
