Re: jQuery 3.5.0

2020-05-07 Thread Travis
It says its not found, even though its listed on the hosted libraries index: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js On Friday, April 24, 2020 at 6:41:05 AM UTC-7, Travis wrote: > > Can we get this added to google hosted libraries? > > Thanks > -- -- You received this

Re: jQuery 3.5.0

2020-05-07 Thread Travis
On Thursday, May 7, 2020 at 6:59:37 AM UTC-7, Balázs Bence wrote: > > Hi, > > Recently WhiteSource flagged a vulnerability in 3.4.1: > > In jQuery before 3.5.0, passing HTML from untrusted sources - even > after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. >

Re: jQuery 3.5.0

2020-05-07 Thread Balázs Bence
thanks, Bence On Thursday, May 7, 2020 at 4:53:37 PM UTC+2, Philipp Wollermann wrote: > > Hi, > > Thanks for bringing this up. I'll upload jQuery 3.5.0 and 3.5.1 today to > our CDN. > > Cheers, > Philipp > > > On Thursday, May 7, 2020 at 4:28:12 PM UTC+2, Christian Oliff wrote: >> >> FYI.

Re: jQuery 3.5.0

2020-05-07 Thread 'Philipp Wollermann' via Google AJAX APIs
Hi Travis, I'll upload jQuery 3.5.0 and 3.5.1 today. Cheers, Philipp On Friday, April 24, 2020 at 3:41:05 PM UTC+2, Travis wrote: > > Can we get this added to google hosted libraries? > > Thanks > -- -- You received this message because you are subscribed to the Google Groups "Google AJAX

Re: jQuery 3.5.0

2020-05-07 Thread 'Philipp Wollermann' via Google AJAX APIs
Hi, Thanks for bringing this up. I'll upload jQuery 3.5.0 and 3.5.1 today to our CDN. Cheers, Philipp On Thursday, May 7, 2020 at 4:28:12 PM UTC+2, Christian Oliff wrote: > > FYI. jQuery 3.5.0 has a regression which breaks quite a few things. jQuery > 3.5.1 is available now so that should be

Re: jQuery 3.5.0

2020-05-07 Thread Christian Oliff
FYI. jQuery 3.5.0 has a regression which breaks quite a few things. jQuery 3.5.1 is available now so that should be added too. https://blog.jquery.com/2020/05/04/jquery-3-5-1-released-fixing-a-regression/ thanks, On Thursday, 7 May 2020 at 22:59:37 UTC+9 bence@gmail.com wrote: > Hi, >

jQuery 3.5.0

2020-05-07 Thread Balázs Bence
Hi, Recently WhiteSource flagged a vulnerability in 3.4.1: In jQuery before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in