X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/blobdiff_plain/163f03e9c9d863061e7ff4114862834ad391d8e6..2fc21bff0adc27d9374aa6b5f5011ca422df47d8:/doc/bugs/outdated_jquery-ui.mdwn?ds=inline

diff --git a/doc/bugs/outdated_jquery-ui.mdwn b/doc/bugs/outdated_jquery-ui.mdwn
index f74c66b06..bcd44e27d 100644
--- a/doc/bugs/outdated_jquery-ui.mdwn
+++ b/doc/bugs/outdated_jquery-ui.mdwn
@@ -3,4 +3,14 @@
            2010-5312, and/or 2012-6662)
 
 I'll do this next time I spend some time on ikiwiki unless Joey or
-Amitai gets there first. --[[smcv]]
+Amitai gets there first.
+
+It doesn't look as though we actually use the vulnerable functionality.
+
+--[[smcv]]
+
+> This is more complicated than it looked at first glance because both
+> jquery and jquery-ui have broken API since the version we embed,
+> and we also ship other jquery plugins for [[plugins/attachment]].
+> Perhaps someone who knows jquery could check compatibility and
+> propose a branch? --[[smcv]]