Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Can the Dojo version be updated in RTC 5.0.2?

Questions
Tags
Users
Badges
Doug Williams
(13●2) Nov 28 '18, 5:44 p.m.

 We are running RTC 5.0.2.  We had a security scan that flagged the 1.8.4 version of the Dojo library as being vulnerable to Cross-site Scripting attacks.  Is there a way to update the library to something later than 1.10.10?

0 votes

1 answer
3,345 views
0 votes

Accepted answer

Permanent link
Ian Wark
(797●1●35●53) Nov 28 '18, 11:10 p.m.

 I don't think this is supported. I understand that the Dojo has been customized by IBM. 


See this jazz.net question:

Doug Williams selected this answer as the correct answer

0 votes

Comments
Ian Wark
Nov 28 '18, 11:24 p.m.
When I do a search on the installation media in RTC 6.0.6 I still see the same 1.8.4 version too.  You may wish to raise a RFE https://www.ibm.com/developerworks/rfe/execute?use_case=changeRequestLanding&BRAND_ID=1&PROD_ID=435&x=13&y=13

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 6,180

Question asked: Nov 28 '18, 5:44 p.m.

Question was seen: 3,345 times

Last updated: Nov 28 '18, 11:24 p.m.

Confirmation Cancel Confirm