Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: Critical
Fix Version/s: 9.5.0, 9.0.1.1, 9.0.0.1
Affects Version/s: 9.0.0, 9.0.1
Component/s: ZK Client Engine
Security Level: Jimmy
Labels:
- jquery
- security
Environment:

Hide

during the jquery upgrade the security patch for ~~ZK-3724~~ wasn't added and needs to be restored

Show
during the jquery upgrade the security patch for ZK-3724 wasn't added and needs to be restored

Safety specification requirements:
None

restore this ajax configuration
https://github.com/zkoss/zk/blob/v8.6.4/zk/src/archive/web/js/zk/ext/jquery.js#L8541-L8546

relates to

ZK-3724 jquery issue - Ajax: Mitigate possible XSS vulnerability

Closed

ZK-3719 upgrade jquery version to 1.12.4

Closed

Assignee:: Leon03
Reporter:: cor3000
Votes:: 0 Vote for this issue
Watchers:: 2 Start watching this issue

Created:: 24/Apr/20 10:36 AM
Updated:: 02/Sep/20 4:58 AM
Resolved:: 28/Apr/20 8:51 AM