All Apps and Add-ons

How to detect usage of JavaScript libraries with known vulnerabilities?

danilreddy
Loves-to-Learn Everything

Hi,

I want to implement a custom command in spluk. So I created an add-on using splunk add-on builder and copied code for my custom command in to add-on.

While validating add-on from the add-on builder, I see  one failure (194 tests passed and one failure)  as

"Detect usage of JavaScript libraries with known vulnerabilities"

When I expand the error clicking on it, I see the solution column mentioned as below

solution: 3rd party CORS request may execute parseHTML() executes scripts in event handlers jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Regex in its jQuery.htmlPrefilter sometimes may introduce XSS Regex in its jQuery.htmlPrefilter sometimes may introduce XSS reDOS - regular expression denial of service Regular Expression Denial of Service (ReDoS) Regular Expression Denial of Service (ReDoS)

Can I get help how to resolve this javascript issue ??

Also, when I download the spl file and install the app, it is not giving "launch app" option in the manage apps page as shown in below snapshot. Is it because of installation of non-validated package??

danilreddy_0-1646215398902.png

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...