4 ms·
As someone who does application security assessments for a living, the biggest problem with jQuery is the lingering, outdated, vulnerable versions that are perv
by geekamongus 7y ago
As someone who does application security assessments for a living, the biggest problem with jQuery is the lingering, outdated, vulnerable versions that are pervasive (1.x and 2.x in particular) in so many applications. I don't care if you decide to use jQuery or not, just have a plan to maintain it and be able to update it without breaking everything, should the need arise.
/preaching
- Carpetsmoker 7y agoIs this a problem that's worse with jQuery than with other libraries such as vue.js, angular, react? (genuine question, not a comeback)
- deleted 7y ago[deleted]
- folkhack 7y agoJust curious what vulns specifically you're referring to?
- geekamongus 7y agohttps://snyk.io/vuln/npm:jquery https://snyk.io/vuln/npm:jquery
- madeofpalk 7y agoI'm curious - what are the types of vulnerabilities that lie in the client-side jQuery?
- provolone 7y agoIf you allow unchecked data to be stored & retrieved there are some XSS vulns in older versions. Ideally this would be prevented in a sane environment.