Skip to content

fix all CVEs in 1.3.2 #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ctcpip wants to merge 9 commits into
base: 1.3.2-branch
Choose a base branch
from
Open

fix all CVEs in 1.3.2 #3

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
ee931ed
Include distribution in release tag
timmywil Feb 12, 2014
c70c7ba
🔒️ fix CVE-2011-4969
ctcpip Dec 20, 2023
8bdec18
🔒️ fix CVE-2012-6708
ctcpip Dec 20, 2023
654d925
🔒️ fix CVE-2019-11358
ctcpip Dec 21, 2023
ae1140f
🔒️ fix CVE-2020-11022
ctcpip Dec 21, 2023
8158bf0
🔒️ fix CVE-2020-7656
ctcpip Feb 10, 2024
6767dbc
🔒️ fix CVE-2020-11023
ctcpip Feb 10, 2024
8f1483b
💚 commit built jquery from latest
ctcpip Feb 15, 2024
f400223
Merge branch '1.2.7-sec' into 1.3.3-sec
ctcpip Feb 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
🔒️ fix CVE-2020-11022
  • Loading branch information
@ctcpip
ctcpip committed Feb 15, 2024
commit ae1140f76fbfdfb018f6fc60fece91af89a1adb1
7 changes: 0 additions & 7 deletions src/core.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -953,13 +953,6 @@ jQuery.extend({

// Convert html string into DOM nodes
if ( typeof elem == "string" ) {
// Fix "XHTML"-style tags in all browsers
elem = elem.replace(/(<(\w+)[^>]*?)\/>/g, function(all, front, tag){
return tag.match(/^(abbr|br|col|img|input|link|meta|param|hr|area|embed)$/i) ?
all :
front + "></" + tag + ">";
});

// Trim whitespace, otherwise indexOf won't work as expected
var tags = jQuery.trim( elem ).toLowerCase(), div = context.createElement("div");

Expand Down
2 changes: 1 addition & 1 deletion test/unit/core.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ test("$()", function() {
equals( code.length, 1, "Correct number of elements generated for code" );
var img = $("<img/>");
equals( img.length, 1, "Correct number of elements generated for img" );
var div = $("<div/><hr/><code/><b/>");
var div = $("<div></div><hr><code></code><b></b>");
equals( div.length, 4, "Correct number of elements generated for div hr code b" );

// can actually yield more than one, when iframes are included, the window is an array as well
Expand Down