jquery update on DSpace server

[Lewatle Johannes Phaladi]

Dear DSpace Team,

We had penetration test done on our DSpace server and it reveals that jquery needs to be updated, we are running DSpace 6.2, java 8 

Please advise what will be solution

when searching packages installed jquery is not revealed on the list 

OS is Centos 7 

When searching I found the following info, does that mean jQuery is not installed separately, it comes with DSpace software  :

1. Mirage Configuration and Customization
   enable you to define styles for handheld devices and printing of pages. jQuery and jQueryUI are included by default. To avoid conflicts the authority control javascript has been rewritten to use jQuery instead of Prototype and Script.aculo.us. Enhanced Performance Concatenation and Minification
   DSpace 6.x Documentation • Mar 17, 2015

Regards,

Lewatle  

[Lewatle Johannes Phaladi]

Hi All,

Solution for this will be to upgrade DSpace software to the latest version.

Regards,

Lewatle 

[Tim Donohue]

Hi,

I also wanted to note that jQuery has been upgraded on our "dspace-6_x" branch via this (very large) PR: https://github.com/DSpace/DSpace/pull/2918

This means that this jQuery update will be included in the 6.4 bug-fix release, once that's ready.  The 6.4 release is now looking likely to occur in the next month or two. The 6.4 release has been a long time coming as most volunteer developers have been working on 7.x, but we're doing our best to finish it up soon.

So, the possible solutions are:

• Upgrade to 7.x
• Upgrade to 6.4 (once it is available)
• Or, apply the PR locally or upgrade to our "dspace-6_x" branch in GitHub (which is essentially pre-6.4).

Tim

---

From: dspac...@googlegroups.com <dspac...@googlegroups.com> on behalf of Lewatle Johannes Phaladi <joem...@gmail.com>
Sent: Tuesday, March 15, 2022 7:58 AM
To: DSpace Technical Support <dspac...@googlegroups.com>
Subject: [dspace-tech] Re: jquery update on DSpace server

 

--
All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/0a31e303-3556-4aff-a9dc-4c7fe59e088fn%40googlegroups.com.

[Lewatle Johannes Phaladi]

Hi Tim,

Thanks very much for helpful information.

Regards,

Lewatle