CVE-2019-11358 CVE-2020-11023 Update jQuery to 3.7.1 #878
Conversation
| <!-- Supress checkstyle errors on legacy com.iplanet and com.sun.identity packages --> | ||
| <checkstyleUnitTestSuppressionsLocation>checkstyle/suppressions.xml</checkstyleUnitTestSuppressionsLocation> | ||
| <opendj.version>4.9.4</opendj.version> | ||
| <opendj.version>4.9.5-SNAPSHOT</opendj.version> |
There was a problem hiding this comment.
This is one of the weird things I haven't understood yet. If the products bring in consistently the same commons BOM, you get better separation of responsibilities. (Right now IG ships with DJ, because openig-saml brings in openam-shared that depends on opendj-core/grizzly for some reason?) Also it would mean that patching commons wouldn't need additional changes in opendj as well.
There was a problem hiding this comment.
It's a good question.
Ideally the commons project should declare all shared project dependencies. In this particular case, there is a jQuery version update in the commons project. OpenAM imports the commons BOM via the OpenDJ project. Thus, we need to update the OpenDJ version in OpenAM to import the updated jQuery dependency from the commons project.
|
Don't know much about the JS side of things, assuming it was tested. |
3 participants
No description provided.