[研究][ASP.NET]AspNet.ScriptManager.jQuery.UI.Combined 1.12.1 移除測試

[研究][ASP.NET]AspNet.ScriptManager.jQuery.UI.Combined 1.12.1 移除測試

2022-09-23

環境：Visual Studio 2022 + ASP.NET + WebForm + Web Application + C#

狀況：NuGet 升級 jQuery.UI.Combined 1.12.1 為 1.13.2 會出現

嚴重性 程式碼 說明 專案 檔案 行 隱藏項目狀態

錯誤 無法解析相依性。'jQuery.UI.Combined 1.13.2' 與 'AspNet.ScriptManager.jQuery.UI.Combined 1.12.1 條件約束: jQuery.UI.Combined (>= 1.12.1 && < 1.12.2)' 不相容。

但 AspNet.ScriptManager.jQuery.UI.Combined 1.12.1 已經是最新，而https://www.nuget.org/packages/AspNet.ScriptManager.jQuery.UI.Combined

而 jQuery.UI.Combined 1.12.1 弱點，又必須升級

NVD CVE-2021-41184 26 Oct 2021 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium

NVD CVE-2021-41183 26 Oct 2021 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium

NVD CVE-2021-41182 26 Oct 2021 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium

NVD CVE-2022-31160 21 Jul 2022 CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

於是測試看看能否單獨移除 AspNet.ScriptManager.jQuery.UI.Combined 1.12.1。

jQuery 之後又升級到 3.6.0

 疑似正常。

升級 jQuery.UI.Combined.1.12.1 -> jQuery.UI.Combined.1.13.2，編譯正常。

整個方案搜尋 1.12.1，把 Scripts/jquery-ui-1.13.2.js 換成 Scripts/jquery-ui-1.13.2.js

(完)

相關

[研究] NuGet 安裝 jQuery.UI.Combined 1.12.1 套件會安裝那些檔案測試

[研究] NuGet 安裝 jQuery.UI.Combined 1.12.1 套件會安裝那些檔案測試

2020-08-26

安裝檔案如下

\Content\themes

\Content\themes\base

\Content\themes\base\accordion.css

\Content\themes\base\all.css

\Content\themes\base\autocomplete.css

\Content\themes\base\base.css

\Content\themes\base\button.css

\Content\themes\base\core.css

\Content\themes\base\datepicker.css

\Content\themes\base\dialog.css

\Content\themes\base\draggable.css

\Content\themes\base\images

\Content\themes\base\jquery-ui.css

\Content\themes\base\jquery-ui.min.css

\Content\themes\base\menu.css

\Content\themes\base\progressbar.css

\Content\themes\base\resizable.css

\Content\themes\base\selectable.css

\Content\themes\base\selectmenu.css

\Content\themes\base\slider.css

\Content\themes\base\sortable.css

\Content\themes\base\spinner.css

\Content\themes\base\tabs.css

\Content\themes\base\theme.css

\Content\themes\base\tooltip.css

\Content\themes\base\images\ui-bg_flat_0_aaaaaa_40x100.png

\Content\themes\base\images\ui-bg_flat_75_ffffff_40x100.png

\Content\themes\base\images\ui-bg_glass_55_fbf9ee_1x400.png

\Content\themes\base\images\ui-bg_glass_65_ffffff_1x400.png

\Content\themes\base\images\ui-bg_glass_75_dadada_1x400.png

\Content\themes\base\images\ui-bg_glass_75_e6e6e6_1x400.png

\Content\themes\base\images\ui-bg_glass_95_fef1ec_1x400.png

\Content\themes\base\images\ui-bg_highlight-soft_75_cccccc_1x100.png

\Content\themes\base\images\ui-icons_222222_256x240.png

\Content\themes\base\images\ui-icons_2e83ff_256x240.png

\Content\themes\base\images\ui-icons_444444_256x240.png

\Content\themes\base\images\ui-icons_454545_256x240.png

\Content\themes\base\images\ui-icons_555555_256x240.png

\Content\themes\base\images\ui-icons_777620_256x240.png

\Content\themes\base\images\ui-icons_777777_256x240.png

\Content\themes\base\images\ui-icons_888888_256x240.png

\Content\themes\base\images\ui-icons_cc0000_256x240.png

\Content\themes\base\images\ui-icons_cd0a0a_256x240.png

\Content\themes\base\images\ui-icons_ffffff_256x240.png

\Scripts\jquery-1.12.4.intellisense.js

\Scripts\jquery-1.12.4.js

\Scripts\jquery-1.12.4.min.js

\Scripts\jquery-1.12.4.min.map

\Scripts\jquery-ui-1.12.1.js

\Scripts\jquery-ui-1.12.1.min.js

(完)