jQuery in Version 2.2.4. has security vulnerabilities

Support
, ,
1

Problem:
The file
/webpack/foreman-vendor.bundle-v8.8.0-production-58389a20e841d3e5b9a0.js
contains jQuery in version 2.2.4.
Security vulnerabilities exist for this version and would like to know how can i update it?

Expected outcome:

Foreman and Proxy versions:

  • foreman-3.0.1-1.el7.noarch
  • katello-4.2.1-1.el7.noarch
    Foreman and Proxy plugin versions:

Distribution and version:
CentOS 7.9
Other relevant data:

2

Thanks, looks like 2.2.4 is the highest version of jQuery v2,
Moving to v3 seem to have a lot of breaking changes: jQuery Core 3.0 Upgrade Guide | jQuery
And it would be better to move to ES6 / React on those pages but as always it’s a matter of capacity.

I can suggest to migrate to jQuery v3, using their migration plugin that shows a console error if we use a deprecated method, and if a file become a total mess then re-write it with modern technologies…

But let’s see what others think:
@jeremylenz @amirfefer @MariaAga