please don't rely on me for this bit

master
Simon McVittie 2014-12-09 23:43:56 +00:00
parent d0dd293449
commit 2fd7f8d5b8
1 changed files with 6 additions and 0 deletions

View File

@ -8,3 +8,9 @@ Amitai gets there first.
It doesn't look as though we actually use the vulnerable functionality.
--[[smcv]]
> This is more complicated than it looked at first glance because both
> jquery and jquery-ui have broken API since the version we embed,
> and we also ship other jquery plugins for [[plugins/attachment]].
> Perhaps someone who knows jquery could check compatibility and
> propose a branch? --[[smcv]]