]> gitweb.factorcode.org Git - factor.git/commit
benchmark.javascript: update jquery to 3.5.1 to avoid noisy XSS warnings.
authorJohn Benediktsson <mrjbq7@gmail.com>
Thu, 24 Dec 2020 17:01:35 +0000 (09:01 -0800)
committerJohn Benediktsson <mrjbq7@gmail.com>
Thu, 24 Dec 2020 17:01:35 +0000 (09:01 -0800)
commit6e7df6b695f6edefe41bf058d4908c44b492c0c0
treeaf756dea95349dd41581b6c5918a386734d3f0ea
parent28dcaf5008d9504caff392d112f7335756f384e1
benchmark.javascript: update jquery to 3.5.1 to avoid noisy XSS warnings.

See #2403:

> Versions of jQuery (prior to 3.5) have a fairly recent XSS
> vulnerability:
> https://www.infoq.com/news/2020/04/jquery-35-xss-vulnerability-fix/

> It looks like the file is not used in any way that would expose the
> XSS bug, but for what it's worth it gets flagged as sketchy by some
> kinds of vulnerability scans my current project uses. Maybe other users
> will get that noise too?
extra/benchmark/javascript/javascript.factor
extra/benchmark/javascript/jquery-1.3.2.min.js [deleted file]
extra/benchmark/javascript/jquery-3.5.1.min.js [new file with mode: 0644]