247347 2022-11-01 17:34:35 -0700 Move and update jquery used by PrettyPatch on bugs.webkit.org and remove jquery-ui source on webkit.org 2022-11-04 14:33:27 -0700 1 1 1 Unclassified WebKit WebKit Website Other Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 lingho lingho jond lingho webkit-bug-importer oldest_to_newest 1909677 0 lingho 2022-11-01 17:34:35 -0700 The following jquery source files jquery-1.4.2.min.js jquery-1.6.2.min.js and jqueryui 1.8.15 contain found security vulnarabilities including but not limited to: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6071 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4969 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31160 Updating them to the latest versions. 1909678 1 webkit-bug-importer 2022-11-01 17:35:20 -0700 <rdar://problem/101833675> 1909814 2 lingho 2022-11-02 11:04:15 -0700 jquery-1.6.2.min.js and jquery-ui are used by TestFailures tools on build.webkit.org which is no longer in service. I will procceed to removing them from www.webkit.org. jquery-1.4.2 is used by PrettyPatch on bugs.webkit.org. I will install jquery-3.6.1 on bugs.webkit.org direct our scripts to use them. This way we will have no dependency on webkit.org for jquery codes going forward. 1909844 3 lingho 2022-11-02 13:13:19 -0700 Pull request: https://github.com/WebKit/WebKit/pull/6047 1910432 4 ews-feeder 2022-11-04 14:33:25 -0700 Committed 256340@main (f6c56f68e9be): <https://commits.webkit.org/256340@main> Reviewed commits have been landed. Closing PR #6047 and removing active labels.