Update swagger (Fix XSS in swagger-ui)

GHSA-3244-8mff-w398 https://www.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/
gotify · Jan 10, 2023 · 501aa95 · 501aa95
1 parent 056cd5e
commit 501aa95
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/ui.go b/docs/ui.go
@@ -36,8 +36,8 @@ var ui = `
   <body>
     <div id="swagger-ui"></div>
 
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/3.20.5/swagger-ui-bundle.js"> </script>
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/3.20.5/swagger-ui-standalone-preset.js"> </script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-bundle.js"> </script>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/swagger-ui/4.15.5/swagger-ui-standalone-preset.js"> </script>
     <script>
     function getBaseURL() {
       var path = window.location.pathname