All Apps and Add-ons

How to detect usage of JavaScript libraries with known vulnerabilities?

danilreddy
Loves-to-Learn Everything

Hi,

I want to implement a custom command in spluk. So I created an add-on using splunk add-on builder and copied code for my custom command in to add-on.

While validating add-on from the add-on builder, I see  one failure (194 tests passed and one failure)  as

"Detect usage of JavaScript libraries with known vulnerabilities"

When I expand the error clicking on it, I see the solution column mentioned as below

solution: 3rd party CORS request may execute parseHTML() executes scripts in event handlers jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Regex in its jQuery.htmlPrefilter sometimes may introduce XSS Regex in its jQuery.htmlPrefilter sometimes may introduce XSS reDOS - regular expression denial of service Regular Expression Denial of Service (ReDoS) Regular Expression Denial of Service (ReDoS)

Can I get help how to resolve this javascript issue ??

Also, when I download the spl file and install the app, it is not giving "launch app" option in the manage apps page as shown in below snapshot. Is it because of installation of non-validated package??

danilreddy_0-1646215398902.png

Labels (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Using the Splunk Threat Research Team’s Latest Security Content

REGISTER HERE Tech Talk | Security Edition Did you know the Splunk Threat Research Team regularly releases ...

SplunkTrust | 2024 SplunkTrust Application Period is Open!

It's that time again, folks! That's right, the application/nomination period for the 2024 SplunkTrust is ...