Chrome audit throws up an issue with jquery

[alan_sh]

On my web site (www.pennine2020.penninescouts.org.uk) when I run an audit in Chrome, one of the errors it throws up is

Code: Select all

Some third-party scripts may contain known security vulnerabilities that are easily identified and exploited by attackers. Learn more.
Library Version           Vulnerability Count     Highest Severity 
jQuery@1.12.4	                1                       Medium

Is there a later version of jquery (the latest is 3.4.1) that I could use? If so, how do I go about using it?

thanks

Alan

[Pablo]

This is most likely a false positive.
The script has been included for many years without any issues.
But you can set the jQuery version in the Page Properties.

[alan_sh]

Thank you

Alan

[alan_sh]

When I set the jquery to 3.3.1 in the page header and publish it, chrome then gives me an error saying that it can't find the file jquery3.3.1.min.js

Where do I find that?

Thanks

Alan

[Pablo]

The file will be automatically generated by WWB.

[alan_sh]

Humm - I only changed one page - do I need to change all of them?

Alan

[alan_sh]

I can answer my own query - you need to 'publish all files' not just modified ones - even if you only change the jquery version in pne page.

Pablo, is this a bug or expected behaviour? I would have expected that any page which has a different jquery would get the .js file published.

CHeers

Alan

[Pablo]

This is expected behavior, not a bug. The page does not keep track of which files have been published.
"Publish modified only " only keeps track of HTML changes.

[alan_sh]

Thank you.

Alan