Page 1 of 1

Should I be worried about this?

Posted: Sat Oct 30, 2021 8:03 pm
by dnlyko
CssMenu

LightHouse Best Practices

Includes front-end JavaScript libraries with known security vulnerabilities 5 vulnerabilities detected
Some third-party scripts may contain known security vulnerabilities that are easily identified and exploited by attackers. Learn more.

Bootstrap@3.3.5
Vulnerability Count:5
Highest Severity: Medium

Ensure CSP is effective against XSS attacks
Passed audits (16)
Not applicable (1)

Re: Should I be worried about this?

Posted: Sun Oct 31, 2021 7:53 am
by Pablo
The CSS menu does not Bootstrap.
Also, I am pretty sure the CSS does not have any vulnerabilities.

Re: Should I be worried about this?

Posted: Sun Oct 31, 2021 12:58 pm
by dnlyko
The page/site only has one object: CssMenu with 5 BreakPoints

https://mysnapsonline.com/index.html

Re: Should I be worried about this?

Posted: Sun Oct 31, 2021 2:22 pm
by Pablo
I think it is related to 'affix', which is part of Bootstrap. This may confuse LightHouse into thinking that the entire Bootstrap library is included, but it isn't.
This particular file does not have any vulnerabilities. All it does it scroll the page.

Re: Should I be worried about this?

Posted: Sun Oct 31, 2021 3:26 pm
by dnlyko
Thanks Pablo.