-
Notifications
You must be signed in to change notification settings - Fork 443
Closed
Labels
bugformat: JavadocAn issue/PR related to Dokka's Javadoc output format or the Javadoc comments in generalAn issue/PR related to Dokka's Javadoc output format or the Javadoc comments in generalgood first issueA beginner-friendly issue for which some assistance is expectedA beginner-friendly issue for which some assistance is expected
Description
Describe the bug
jQuery 3.3.1 has multiple CVEs that are starting to show up in my organization's automated security scanning as it is contained in the output javadoc.
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-11022
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2019-11358
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2020-11023
Expected behaviour
Javadoc output to not have multiple CVEs associated with it.
To Reproduce
- Create a very basic Kotlin project with Dokka
- Use Dokka to create the javadoc for the project
- Check the javadoc output and see that it's using jQuery 3.3.1
Dokka configuration
Configuration of dokka used to reproduce the bug
dokkaSourceSets {
configureEach {
// Disable linking to online kotlin-stdlib documentation
noStdlibLink.set(true)
// Disable linking to online JDK documentation
noJdkLink.set(true)
}
}
Installation
- Operating system: macOS
- Build tool: Gradle v7.0.2
- Dokka version: 1.4.32
Are you willing to provide a PR?
Yes, I am willing to provide a PR
rnett
Metadata
Metadata
Assignees
Labels
bugformat: JavadocAn issue/PR related to Dokka's Javadoc output format or the Javadoc comments in generalAn issue/PR related to Dokka's Javadoc output format or the Javadoc comments in generalgood first issueA beginner-friendly issue for which some assistance is expectedA beginner-friendly issue for which some assistance is expected