Page 1 of 1
Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 1:06 pm
by alan_sh
On my web site (
www.pennine2020.penninescouts.org.uk) when I run an audit in Chrome, one of the errors it throws up is
Code: Select all
Some third-party scripts may contain known security vulnerabilities that are easily identified and exploited by attackers. Learn more.
Library Version Vulnerability Count Highest Severity
jQuery@1.12.4 1 Medium
Is there a later version of jquery (the latest is 3.4.1) that I could use? If so, how do I go about using it?
thanks
Alan
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 1:52 pm
by Pablo
This is most likely a false positive.
The script has been included for many years without any issues.
But you can set the jQuery version in the Page Properties.
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 4:39 pm
by alan_sh
Thank you
Alan
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:02 pm
by alan_sh
When I set the jquery to 3.3.1 in the page header and publish it, chrome then gives me an error saying that it can't find the file jquery3.3.1.min.js
Where do I find that?
Thanks
Alan
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:06 pm
by Pablo
The file will be automatically generated by WWB.
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:09 pm
by alan_sh
Humm - I only changed one page - do I need to change all of them?
Alan
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:23 pm
by alan_sh
I can answer my own query - you need to 'publish all files' not just modified ones - even if you only change the jquery version in pne page.
Pablo, is this a bug or expected behaviour? I would have expected that any page which has a different jquery would get the .js file published.
CHeers
Alan
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:27 pm
by Pablo
This is expected behavior, not a bug. The page does not keep track of which files have been published.
"Publish modified only " only keeps track of HTML changes.
Re: Chrome audit throws up an issue with jquery
Posted: Fri May 10, 2019 6:37 pm
by alan_sh
Thank you.
Alan