You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> *CVE-2015-9251 is not reproducible in `1.2.6` and `1.3.2`
49
49
50
50
> [!NOTE]
51
51
> The 3.x release line is currently supported by jQuery, so we have no need to provide patched versions of 3.x at this time. jQuery 3.5 introduced a breaking change, but it was necessary to fix CVE-2020-11022 and CVE-2020-11023. However, since these vulnerabilities are present in virtually all versions of jQuery, there would be no value in providing a patched version of 3.4 as it would need to include that breaking change anyway.
@@ -60,8 +60,13 @@ Ultimately, our hope is that these patched versions can be approved and accepted
> In order to keep the version PRs clean, you will need to use different branches depending on whether you want to run the jQuery testsor the A/B CVE tests. For the A/B CVE tests, you need to checkout the `main` branch. For the jQuery tests, you need to checkout the branch of the version you are interested in, e.g. `1.6.5-sec`.
4
+
> In order to keep the version PRs clean, you will need to use different branches depending on whether you want to run the jQuery tests, build jQuery, or run the A/B CVE tests. For the A/B CVE tests, you need to checkout the `main` branch. For the jQuery tests or to build jQuery, you need to checkout the branch of the version you are interested in, e.g. `1.6.5-sec`.
5
5
6
-
## jQuery tests
6
+
## Testing
7
7
8
-
### How to run jQuery tests
8
+
### jQuery tests
9
9
10
-
Includes instructions only for how to run the tests on MacOS. (PRs welcome for instructions for other platforms!)
10
+
#### How to run jQuery tests
11
11
12
-
#### 1.2.6 / 1.2.7-sec
12
+
#####1.2.6 / 1.2.7-sec
13
13
14
+
- Checkout the `1.2.6` or `1.2.7-sec` branch
14
15
- Run `make test` from the root folder of the repo
15
16
- Open `/tests/index.html` in your browser
16
17
17
-
#### 1.6.4 / 1.6.5-sec
18
+
#####1.3.2 / 1.3.3-sec
18
19
19
-
##### Prerequisites
20
+
<!-- - Checkout the `1.3.2` or `1.3.3-sec` branch
21
+
- Run `make test` from the root folder of the repo
22
+
- Open `/tests/index.html` in your browser -->
23
+
24
+
##### 1.6.4 / 1.6.5-sec
25
+
26
+
###### Prerequisites
20
27
21
28
- Install php 5.6
22
-
- We recommend using [homebrew-php](https://github.com/shivammathur/homebrew-php)
29
+
-For Macs, We recommend using [homebrew-php](https://github.com/shivammathur/homebrew-php)
23
30
24
-
##### Running the tests
31
+
######Running the tests
25
32
26
-
- Checkout the branch of the version you are interested in, e.g. `1.6.5-sec`
33
+
- Checkout the `1.6.4` or `1.6.5-sec` branch
27
34
- Run php server from the root folder of the repo: `php -S 127.0.0.1:8000`
28
35
- Open `127.0.0.1:8000/tests/index.html` in your browser
29
36
30
-
## A/B end-to-end acceptance tests
37
+
###A/B end-to-end acceptance tests
31
38
32
39
Tests run on every push in CI via [GitHub workflow](https://github.com/ctcpip/jquery-security-patches/actions/workflows/security-test.yml)
33
40
34
41
You can run the A/B tests locally in CI mode or manually in the browser
35
42
36
-
### How to run A/B end-to-end acceptance tests in CI mode
43
+
####How to run A/B end-to-end acceptance tests in CI mode
37
44
38
45
- Checkout the `main` branch
39
46
- Run `nom test` in `/security/test`
40
47
- Rejoice!
41
48
42
-
### How to run A/B end-to-end acceptance tests manually
49
+
####How to run A/B end-to-end acceptance tests manually
43
50
44
51
- Checkout the `main` branch
45
52
- Run `nom run serve` in `/security/test`
@@ -49,3 +56,22 @@ You can run the A/B tests locally in CI mode or manually in the browser
49
56
- Check the `Patched` checkbox to load the patched version of the jQuery version you selected
50
57
- An attempt is made to trigger all CVEs automatically, but you can attempt to trigger them again by clicking their respective buttons
51
58
- Rejoice!
59
+
60
+
## Building
61
+
62
+
<!-- markdownlint-disable-next-line MD024 -->
63
+
### 1.2.6 / 1.2.7-sec
64
+
65
+
- Checkout the `1.2.6` or `1.2.7-sec` branch
66
+
- Run `make jquery` from the root folder of the repo
67
+
- this will output `./dist/jquery.js`
68
+
69
+
<!-- markdownlint-disable-next-line MD024 -->
70
+
### 1.3.2 / 1.3.3-sec
71
+
72
+
- Checkout the `1.3.2` or `1.3.3-sec` branch
73
+
- Run `make jquery` from the root folder of the repo
0 commit comments