-
Notifications
You must be signed in to change notification settings - Fork 16.4k
Bump FAB in order to bump jQuery (resolves SNYK-JS-JQUERY-565129) #8586
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
hmm maybe we should remove the jquery references in package.json too - will check |
|
ran the following commands and pushed |
|
@ryw Can you rebase on master again please to fix the failing tests |
|
jQuery 3.5.0 raises an issue in Airflow #8599 |
|
@potiuk when you get a chance, any ideas on what i need to do to clear build errors? |
|
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
To clear a Cross-site Scripting (XSS) CVE in Airflow, looks like Airflow gets its jQuery from FAB.
FAB 2.3.3 bumped jQuery to resolve: dpgaspar/Flask-AppBuilder#1350
Make sure to mark the boxes below before creating PR: [x]
In case of fundamental code change, Airflow Improvement Proposal (AIP) is needed.
In case of a new dependency, check compliance with the ASF 3rd Party License Policy.
In case of backwards incompatible changes please leave a note in UPDATING.md.
Read the Pull Request Guidelines for more information.