Skip to content

fix all CVEs in 1.7.2 #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
ctcpip wants to merge 29 commits into
base: 1.7.2-branch
Choose a base branch
from
Open

fix all CVEs in 1.7.2 #7

Changes from 1 commit
Commits
Show all changes
29 commits
Select commit Hold shift + click to select a range
ee931ed
Include distribution in release tag
timmywil Feb 12, 2014
13e9cde
Include distribution in release tag
timmywil Feb 12, 2014
9b20df0
Include distribution in release tag
timmywil Feb 12, 2014
dbce0ce
Include distribution in release tag
timmywil Feb 12, 2014
2888cae
Include distribution in release tag
timmywil Feb 12, 2014
af543e2
🔒️ fix CVE-2015-9251
ctcpip Dec 11, 2023
eb69988
🔒️ fix CVE-2012-6708
ctcpip Dec 11, 2023
ab024c1
🔒️ fix CVE-2019-11358
ctcpip Dec 11, 2023
a92926c
🔒️ fix CVE-2020-11022
ctcpip Dec 11, 2023
e5a5d49
🔒️ fix CVE-2020-11023
ctcpip Dec 11, 2023
9048c5a
🔒️ fix CVE-2020-7656
ctcpip Dec 11, 2023
ac067d7
fix support reference
ctcpip Dec 15, 2023
fe5ca13
fix script regex
ctcpip Dec 15, 2023
08ffd65
test fixes
ctcpip Dec 18, 2023
c70c7ba
🔒️ fix CVE-2011-4969
ctcpip Dec 20, 2023
8bdec18
🔒️ fix CVE-2012-6708
ctcpip Dec 20, 2023
654d925
🔒️ fix CVE-2019-11358
ctcpip Dec 21, 2023
ae1140f
🔒️ fix CVE-2020-11022
ctcpip Dec 21, 2023
8158bf0
🔒️ fix CVE-2020-7656
ctcpip Feb 10, 2024
6767dbc
🔒️ fix CVE-2020-11023
ctcpip Feb 10, 2024
8f1483b
💚 commit built jquery from latest
ctcpip Feb 15, 2024
f400223
Merge branch '1.2.7-sec' into 1.3.3-sec
ctcpip Feb 15, 2024
5affbad
Merge branch '1.3.3-sec' into 1.4.5-sec
ctcpip Feb 15, 2024
d0fef0a
✅ fix tests
ctcpip Feb 15, 2024
634d27d
🔒️ fix CVE-2015-9251
ctcpip Feb 16, 2024
fa65c2b
♻️ update old node code, prevent jslint exception
ctcpip Feb 16, 2024
6446298
Merge branch '1.4.5-sec' into 1.5.3-sec
ctcpip Feb 16, 2024
3877721
Merge branch '1.5.3-sec' into 1.6.5-sec
ctcpip Feb 16, 2024
d412a7b
Merge branch '1.6.5-sec' into 1.7.3-sec
ctcpip Feb 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
🔒️ fix CVE-2012-6708
  • Loading branch information
@ctcpip
ctcpip committed Feb 15, 2024
commit 8bdec180f21fc746f7e15a73672bd4568ac37c19
3 changes: 2 additions & 1 deletion src/core.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,8 @@ var jQuery = window.jQuery = window.$ = function( selector, context ) {

// A simple way to check for HTML strings or ID strings
// Prioritize #id over <tag> to avoid XSS via location.hash (#9521)
var quickExpr = /^(?:[^#<]*(<[\w\W]+>)[^>]*$|#([\w\-]*)$)/,
// Strict HTML recognition (#11290: must start with <)
var quickExpr = /^(?:(<[\w\W]+>)[^>]*|#([\w-]*))$/,

// Is it a simple selector
isSimple = /^.[^:#\[\.]*$/,
Expand Down