Bootstrap upgrade

More
1 year 5 days ago #187080 by Talsaady
Bootstrap upgrade was created by Talsaady
hi, i am using Limesyrvay ver. 3.17.8 with bootstrap version 3.3.7 which has some vulnerabilities, and I am wondering if it will work with bootstrap version 4?

regards

Please Log in to join the conversation.

LimeSurvey Partners
More
1 year 3 days ago #187165 by Talsaady
Replied by Talsaady on topic Bootstrap upgrade
Hello,
actually attached picture show our security scan result on our survey site.

regards,
Attachments:

Please Log in to join the conversation.

More
1 year 3 days ago #187166 by tpartner
Replied by tpartner on topic Bootstrap upgrade
Please file a bug report

Cheers,
Tony Partner

Solutions, code and workarounds presented in these forums are given without any warranty, implied or otherwise.
Official LimeSurvey Partner - partnersurveys.com

Please Log in to join the conversation.

More
1 year 3 days ago #187170 by DenisChenu
Replied by DenisChenu on topic Bootstrap upgrade

jelo wrote: JQuery
www.cvedetails.com/cve/CVE-2019-11358/

Unsure could be impacted (if XSS is on).

But we must remove/disable the old jquery.js file …

jelo wrote: Bootstrap:
www.cvedetails.com/cve/CVE-2019-8331/
github.com/twbs/bootstrap/releases

Unsure could be impacted (if XSS is on)., less sure. XSS user can use class for tooltip, but don't know how to add XSS inside this tooltip.

Think we can easily update to github.com/twbs/bootstrap/releases/tag/v3.4.1

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
1 year 2 days ago #187191 by DenisChenu
Replied by DenisChenu on topic Bootstrap upgrade
github.com/LimeSurvey/LimeSurvey/tree/master/tests

But here need a test for ranking and slider

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now