task/WI-212:Fix security suggestions

[fnets]

Overview

Addressing issues mentioned in UT security scan attached to JIRA. The main issues are updating Bootstrap and jQuery.

Related

• WI-212

Changes

Updated bootstrap from 3.3.4 to 4.6.2 and jQuery from 1.11.1 to 3.5.1

Testing

1. Generally click around the portal and make sure that you don't see any obvious styling problems. I ran our E2E test suite against a local instance of CEP. You might want to try testing against another local portal instance.

UI

Notes

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 72.53%. Comparing base (5b3872f) to head (84750e5).
Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1030   +/-   ##
=======================================
  Coverage   72.53%   72.53%           
=======================================
  Files         534      534           
  Lines       33758    33758           
  Branches     2993     2993           
=======================================
  Hits        24486    24486           
  Misses       9074     9074           
  Partials      198      198           

Flag	Coverage Δ
javascript	75.20% <ø> (ø)
unittests	60.84% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

[wesleyboar]

I've updated Confluence: Shared UI - Bootstrap to reflect these version updates coming for Core-Portal and Core-CMS.

[wesleyboar]

👍 Bootstrap v4.6.2 is coupled to jQuery v3.5 and is coupled to Popper v1.16.

[fnets]

👍 Bootstrap v4.6.2 is coupled to jQuery v3.5 and is coupled to Popper v1.16.

I'm pretty sure I made those updates, too. Did I miss one somewhere?

[wesleyboar]

👍 Bootstrap v4.6.2 is coupled to jQuery v3.5 and is coupled to Popper v1.16.

I'm pretty sure I made those updates, too. Did I miss one somewhere?

You did. Nope. All good. I was just noting your success matching versions as I read through the code.

[wesleyboar]

I found no warning signs in the Bootstrap changelog. I agree testing is just poking around the app.

[chandra-tacc]

tested, no 4xx or 5xx status

[taoteg]

LGTM.