jQuery 3.5.0

[Balázs Bence]

Hi,

Recently WhiteSource flagged a vulnerability in 3.4.1:

In jQuery before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. Can you add 3.5.0 to google hosted libraries? https://ajax.googleapis.com/ajax/libs/jquery/3.5.0/jquery.min.js Thanks,  Bence

[Christian Oliff]

FYI. jQuery 3.5.0 has a regression which breaks quite a few things. jQuery 3.5.1 is available now so that should be added too.

https://blog.jquery.com/2020/05/04/jquery-3-5-1-released-fixing-a-regression/ 

 thanks,

[Philipp Wollermann]

Hi,

Thanks for bringing this up. I'll upload jQuery 3.5.0 and 3.5.1 today to our CDN.

Cheers,

Philipp

[Balázs Bence]

thanks,

Bence

[Travis]

It's updated on the hosted libraries page but the URL doesnt even work: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js