Hi,
I want to implement a custom command in spluk. So I created an add-on using splunk add-on builder and copied code for my custom command in to add-on.
While validating add-on from the add-on builder, I see one failure (194 tests passed and one failure) as
"Detect usage of JavaScript libraries with known vulnerabilities"
When I expand the error clicking on it, I see the solution column mentioned as below
solution: 3rd party CORS request may execute parseHTML() executes scripts in event handlers jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Regex in its jQuery.htmlPrefilter sometimes may introduce XSS Regex in its jQuery.htmlPrefilter sometimes may introduce XSS reDOS - regular expression denial of service Regular Expression Denial of Service (ReDoS) Regular Expression Denial of Service (ReDoS)
Can I get help how to resolve this javascript issue ??
Also, when I download the spl file and install the app, it is not giving "launch app" option in the manage apps page as shown in below snapshot. Is it because of installation of non-validated package??
