Why I'm still using jQuery

Re:Why I'm still using jQuery by geekamongus on Monday May 27, 2019 @08:21AM (#20021542)

As someone who does application security assessments for a living, the biggest problem with jQuery is the lingering, outdated, vulnerable versions that are pervasive (1.x and 2.x in particular) in so many applications. I don't care if you decide to use jQuery or not, just have a plan to maintain it and be able to update it without breaking everything, should the need arise.

/preaching

[ Parent | on HN ]

Re:Why I'm still using jQuery by madeofpalk on Monday May 27, 2019 @09:26AM (#20022000)

I'm curious - what are the types of vulnerabilities that lie in the client-side jQuery?

[ Parent | on HN ]

Re:Why I'm still using jQuery by provolone on Monday May 27, 2019 @11:06AM (#20022673)

If you allow unchecked data to be stored & retrieved there are some XSS vulns in older versions. Ideally this would be prevented in a sane environment.

[ Parent | on HN ]

Re:Why I'm still using jQuery by Carpetsmoker on Monday May 27, 2019 @08:29AM (#20021593)

Is this a problem that's worse with jQuery than with other libraries such as vue.js, angular, react? (genuine question, not a comeback)

[ Parent | on HN ]

Re:Why I'm still using jQuery by folkhack on Monday May 27, 2019 @09:22AM (#20021971)

Just curious what vulns specifically you're referring to?

[ Parent | on HN ]

Re:Why I'm still using jQuery by geekamongus on Monday May 27, 2019 @12:04PM (#20023084)

https://snyk.io/vuln/npm:jquery

[ Parent | on HN ]