A new bug report for version 1.21.0. > We've gotten reports that the jQuery-validate plugin is flagging in > vulnerability scans (https://nvd.nist.gov/vuln/detail/CVE-2022-31147 for > details on the associated CVE). > > I've put this in security to be on the safe side but if it should be moved, > please do.
Created attachment 188644 [details] [review] Bug 41142: Update jQuery-validate plugin to 1.21.0 This patch updates the jQuery validation plugin in both the staff interface and the OPAC to the latest version, 1.21.0. To test, apply the patch and clear your browser cache if necessary. Test various pages in the staff client to confirm that form validation works as expected: - Patron password change form: - Password must conform to minPasswordLength - Password must not contain leading/trailing spaces - Passwords must match - Administration -> Add or edit budget: - Description, start date, and end date are required - Start date must be before end date - Administration -> Add or edit Z39.50/SRU server: - Server name, hostname, port, and database are required - Port, rank, and timeout must be a number Perform the same check of the "Change password" form in the OPAC. Sponsored-by: Athens County Public Libraries
*** Bug 34623 has been marked as a duplicate of this bug. ***