[wp-trac] [WordPress Trac] #37110: Update to jQuery 3.*

WordPress Trac noreply at wordpress.org
Sat Apr 25 07:13:22 UTC 2020


#37110: Update to jQuery 3.*
-------------------------------------------------+-------------------------
 Reporter:  jorbin                               |       Owner:  (none)
     Type:  task (blessed)                       |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  External Libraries                   |     Version:
 Severity:  critical                             |  Resolution:
 Keywords:  early has-patch needs-testing        |     Focuses:  javascript
  needs-dev-note needs-screenshots needs-        |
  refresh                                        |
-------------------------------------------------+-------------------------

Comment (by galbaras):

 @azaozz I guess, then, that switching WordPress itself to native JS and
 only enqueuing it if it's listed as a dependency anywhere may be a way to
 take a step forward in core.

 One point that may have been missed along the way: the WP version of
 jQuery is safe, and loaded with `?ver=1.12.4-wp`, yet the security service
 still identifies it as 1.12.4, because inside the file, that's still the
 version number.

 If there is no major significance to the inline version number, why not
 just change it and get rid of the security alert? Sure seems like a small,
 easy change to me.

 Another way is to contribute the safe WP jQuery version back to jQuery as
 version 1.12.5, and change the inline version and URL version, because it
 will be official.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/37110#comment:113>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list