update jquery

Question

Dear Support,

I notice that jquery version in canvas template that downloaded is jquery v.3.4.1.Therefore, it may be affected by a cross-site scripting vulnerability via the regex operation in jQuery.htmlPrefilter. So i want to upgrade my jquery version from v3.4.1 to v3.5.0 or v3.5.1. Is it possible to apply on the canvas template or the upgrade make some function cant work ? If it's possible, how can i upgrade my jquery version ?

And i want to adding Content Security Policy (CSP) to my website with canvas template, Can you recomend to setting about it please ?

Thank You.

Warm Regards,
Rizquha Maulida

SemiColonWeb · Accepted Answer

Hello,

We have just checked out Our Package Files and the jQuery Version included with Canvas is at its Latest Version v3.5.1. Would please consider checking this again? Thanks for your Patience.

Meanwhile, do let us know if we can help you with anything else or if you find any further issues with Canvas.

rizquhamaulida · Answer

Hai, thankyou for your fast response. Can you tell me how to check the jquery version on the canvas ? Because as you can see in my attachment that my version jquery is v.3.4.1 when im download it. Or i should download it again to get last update from the canvas ?

Thank you.

Warm Regards,
Rizquha Maulida

Semicolon Web · Answer

Hello, You can check the Version of jQuery used in Canvas in the File. Check the Version used in the Live Previews: http://themes.semicolonweb.com/html/canvas/js/jquery.js . Could you please let us know which Version of Canvas you are using by checking the File so that we can check and determine if…

rizquhamaulida · Answer

Oke thankyou, i will check it later, if any concern i will asking you again. Thank you for your help.

By the way, i want to adding Content Security Policy (CSP) to my website with canvas template, Could you recommend to setting CSP for canvas template ?

Semicolon Web · Answer

Hello,

CSP is something that is not implemented with HTML but something that you will need to implement on your Servers. You can consider contacting your Web Hosting Provider and ask them to add CSP checks for you. You can also consider checking the Examples and more Documentations here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP .

Hope this Helps!

Let us know if we can help you with anything else or if you find any further issues.

rizquhamaulida · Answer

okey thankyou for your kind response.