All Apps and Add-ons

How to detect usage of JavaScript libraries with known vulnerabilities?

danilreddy
Loves-to-Learn Everything

Hi,

I want to implement a custom command in spluk. So I created an add-on using splunk add-on builder and copied code for my custom command in to add-on.

While validating add-on from the add-on builder, I see  one failure (194 tests passed and one failure)  as

"Detect usage of JavaScript libraries with known vulnerabilities"

When I expand the error clicking on it, I see the solution column mentioned as below

solution: 3rd party CORS request may execute parseHTML() executes scripts in event handlers jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Regex in its jQuery.htmlPrefilter sometimes may introduce XSS Regex in its jQuery.htmlPrefilter sometimes may introduce XSS reDOS - regular expression denial of service Regular Expression Denial of Service (ReDoS) Regular Expression Denial of Service (ReDoS)

Can I get help how to resolve this javascript issue ??

Also, when I download the spl file and install the app, it is not giving "launch app" option in the manage apps page as shown in below snapshot. Is it because of installation of non-validated package??

danilreddy_0-1646215398902.png

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more with ITSI’s ...

Accelerate Service Onboarding, Decomposition, Troubleshooting - and more! Faster Time to ValueManaging and ...

New Release | Splunk Enterprise 9.3

Hi Splunky people! We are excited to share the newest updates in Splunk Enterprise 9.3!Admins and Analyst can ...

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...