All Apps and Add-ons

How to detect usage of JavaScript libraries with known vulnerabilities?

danilreddy
Loves-to-Learn Everything

Hi,

I want to implement a custom command in spluk. So I created an add-on using splunk add-on builder and copied code for my custom command in to add-on.

While validating add-on from the add-on builder, I see  one failure (194 tests passed and one failure)  as

"Detect usage of JavaScript libraries with known vulnerabilities"

When I expand the error clicking on it, I see the solution column mentioned as below

solution: 3rd party CORS request may execute parseHTML() executes scripts in event handlers jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Regex in its jQuery.htmlPrefilter sometimes may introduce XSS Regex in its jQuery.htmlPrefilter sometimes may introduce XSS reDOS - regular expression denial of service Regular Expression Denial of Service (ReDoS) Regular Expression Denial of Service (ReDoS)

Can I get help how to resolve this javascript issue ??

Also, when I download the spl file and install the app, it is not giving "launch app" option in the manage apps page as shown in below snapshot. Is it because of installation of non-validated package??

danilreddy_0-1646215398902.png

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...