Inedo Community Forums Forums
    • Recent
    • Tags
    • Popular
    • Login
    1. Home
    2. richard.carpenter_9650
    3. Topics

    Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

    If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

    R Offline
    • Profile
    • Following 0
    • Followers 0
    • Topics 2
    • Posts 3
    • Groups 0

    Topics

    • R

      Two PowerShell Gallery packages shown in all feeds

      Watching Ignoring Scheduled Pinned Locked Moved Support
      4
      1
      0 Votes
      4 Posts
      12 Views
      stevedennisS
      Hi @richard-carpenter_9650 , Thanks for confirming that; that is really strange. I just tried it msyefl and got the same result. The technical answer is that PowerShell gallery is sorting the feed alphabetically, and is only returning the top 100 entries. Of those entries, all but two are unlisted. So that's all you see. Not a great UX, so hopefully it goes away (i.e. they return the default sort order by downloads), or maybe we can sort differently ourselves. We're not too keen to change this, since it's the "very sensitive" legacy NuGet v2 API, but perhaps in v2023 we can alter this. Cheers, Steve
    • R

      XSS vulnerability on JQuery < 3.5.0 - ProGet 5.3.4

      Watching Ignoring Scheduled Pinned Locked Moved Support
      2
      0 Votes
      2 Posts
      20 Views
      apxltdA
      Hello; We are aware of the vulnerabilities. Our usage of this library is minimal, and we do not use it in a manner that would impact product security (i.e. "passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others). So please consider this a "false positive". Upgrading the library to 3.5.0 would add no value to ProGet users, but it would provide significant risk of UI regressions and risk of introducing unknown security vulnerabilities, that haven't yet been reported.
    • 1 / 1