Skip to content

Commit

Permalink
Fixes #17516 - Update jquery to 1.12 to fix XSS
Browse files Browse the repository at this point in the history
Affected versions of the package (< 1.12) are vulnerable to Cross-site
Scripting (XSS) attacks when a cross-domain ajax request is performed
without the dataType option causing text/javascript responses to be
executed.

jquery/jquery#2432 for more information
  • Loading branch information
dLobatog committed Nov 29, 2016
1 parent b907bcc commit f966eaf
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package.json
Expand Up @@ -44,7 +44,7 @@
"events": "^1.1.1",
"flux": "^2.1.1",
"ipaddr.js": "~1.2.0",
"jquery": "~1.11.0",
"jquery": "~1.12.0",
"jquery-flot": "~0.8.3",
"jquery-ujs": "~1.2.0",
"jquery.cookie": "~1.4.1",
Expand Down

0 comments on commit f966eaf

Please sign in to comment.