At Splunk, we are continuously working to enhance the security of Splunk Enterprise and Splunk Cloud Platform. As part of that effort, we have been working towards deprecating jQuery libraries older than v3.5 since the release of Splunk Enterprise v9.0 and Splunk Cloud Platform v8.2.2105 in early 2021. We intend to continue the deprecation process of older jQuery library usage for security purposes.
Your ACTION IS REQUIRED to prepare for the removal of pre-v3.5 jQuery libraries. For details on how to upgrade them in your Splunk instance, refer to Upgrade Your Splunk Instance to jQuery 3.5 in Three Simple Steps.
Please see notes below for updates specific to your deployment type.
For Splunk Enterprise Admins:
Starting with the Splunk Enterprise v9.1, with an expected release sometime in June-August of 2023, usage of older jQuery libraries will be restricted by default.
However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”.
For Splunk Cloud Admins:
Starting with the release of Splunk Cloud Platform v9.0.2208, use of older jQuery libraries is restricted by default.
However, customers can enable the use of older jQuery libraries in a self-serviceable manner via “Settings > Server Settings > Internal Library Settings”.
We plan to remove the ability to use such libraries starting v9.0.2305 of Splunk Cloud Platform targeted for June-August 2023 timeframe.
