I have a web application developed in MVC. It's an existing application. While doing the SAST testing, we got some security issues under critical status like Insecure Randomness, CRSF (DOM), OPen indirect.
This issue is happening due to the javascript function ai.0.22.9-build00167.js. please someone can explain to me what is the use of this script. Also, I can find the new version after this.
Let clarify if I might update to the new version it will help me to fix the issue. If yes, please let to know how to update this version. Because I tried to update from Nuget from visual studio it's not helping me also I tried to download from other sites. but the file format is not supported.
If no, please someone can help me to resolve this.
The same issue I am facing in the below files also since its inbuild scripts I don't know how to handle.
jquery-1.10.2-vsdoc.js,
jquery.unobtrusive-ajax,
jquery.unobtrusive-ajax.min.js,
jquery.validate-vsdoc.js,
jquery.validate.js,
jquery.validate.min.js
Thanks
ai.0.22.9-build00167.js is Microsoft Azure Application Insights JavaScript library.
Not sure why your MVC project is using App Insights JavaScript library! On top, this library is not updated since Aug, 2018 so surely there are latest/new library from Microsoft.
These are few points to help you decide:
1. Remove/Uninstall NuGet package
If your project is NOT not using any of the JavaScript framework (like Angular, ReactJS, VueJS, etc), you can remove/uninstall App Insights - JavaScript NuGet package.
This will also stop collecting your application health data in Azure App Insights.
2. For JavaScript Framework
If your project is using JavaScript framework (like Angular, Vue, etc) - you can install latest version of App Insights - Web library and configured accordingly.
It is NOT a NuGet package, instead it is NPM package.
3. For MVC Application
If there is a need to collect your MVC application health data in App Insights, you can install Application Insights SDK and configured accordingly.
Related
Trying to delve into Node.js terminology and functionality. Been consulting the following MVC example https://www.sitepoint.com/node-js-mvc-application/ that also has its GitHub repository https://github.com/sitepoint-editors/notes-board. However, when I build the app with all npm installed packages, except sqlite3 (I installed version 5), app is irresponsive in case there is a need to write to sqlite db, however it is able to read and delete any queries, but when there is a need to publish, it simply does not show any reactions. I am banging my head for a while now, so is there any advice or instruction out there what to do....
Need a bit of help understanding javascript bundlers, and how to implement them on my website (I'm a novice and I don't have a great deal of experience).
I know I need a bundler as I need to improve my site's speed, and I do understand the logic and purpose of them etc. The website's already been developed and is live on a shared hosting package (1&1/Ionos). From research, the likes of Webpack can only be installed with the command line. While I can access my hosting package via Putty, I would need to install jquery to use npm commands (which is forbidden) - so my question is - can I install and configure Webpack in development mode on my desktop (using Xampp or something similar), and then just upload/copy and paste the files to my hosting package, and it'll work the same?
Happy to do the research and follow online tutorials once I know what I'm meant to be doing etc. All help appreciated!
Cheers!
I'd like to know why there isn't a npm / yarn package to Twilio Client Javascript SDK 1.4.
I'm trying to use their voice service, following this tutorial, but in React Native.
Is this package for browser usage only? How could I have access to Twilio.Client on react-native?
I already implemented a programmable-chat with success, using the provided packages twilio-chat and twilio-common.
Meanwhile, is there any way of importing a remote file or using a local javascript file (twilio.min.js) to a react-native app?
Thanks in advance.
EDIT:
Further research lead me to believe that this SDK only work for browsers since it has to deal with audio events, connection status etc.
Correct me if I'm wrong.
I'm now trying to implement react-native-twilio-programmable-voice
.
I have migrated my meteor 1.2.1 code base to meteor 1.3.0 and also moved all client code to imports/ui to utilize lazy loading feature for imports folder.
My problem is, If I am changing any client side file its restarting every time, which slows down development time in meteor 1.3.0 as I have to wait for building process.
Please provide your suggestion or best approach to overcome this issue.
As I have used Meteor 1.3.0 imports directory structure I have faced that issue but below are solution.
I am posting answer to my question as I have found reason why Meteor rebuilding my client side code, When I change any file.
Currently I am using /imports/ui/ for storing client side code. As you all know ui directory doesn't have any special purpose in Meteor build.
So, it assume this code as client or server code and rebuild and restart meteor app every time.
If you rename that folder/directory to client then it only refresh client side code not full app because client folder have special meaning in meteor.
Moreover now you can also use latest version of meteor which help to speed up startup building your app.
Hope this will help you solve problem.
Meteor 1.4.2 is been released in these days.
In the official forum they say: The big news is improved rebuild performance.
Maybe you should give a try.
I am a fan of grunt. But unfortunately, we do not have node and hence the ability to access npm packages in our work environment. I have been creating a HTML5 application using AngularJS+Bootstrap etc. I have been able to start and develop the app using angular seed.
However, my main problem is the build (obfuscation and minification) process for such a project. Since ours is a protected environment, I cannot leverage help of other tools like coffeescript etc. I need some tool which may be as good as grunt, but would be available for download directly.
Any help is appreciated and thank you in advance.