HIVE-28496: Address CVE-2020-28487 due to 4.20.0 version of vis.js (#…

…5430)(Kiran Velumuri, reviewed by Shohei Okumiya, Stamatis Zampetakis, Butao Zhang)
apache · Sep 28, 2024 · d85b87c · d85b87c
1 parent b058e3d
commit d85b87c
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 64 deletions.
diff --git a/service/src/jamon/org/apache/hive/tmpl/QueryProfileTmpl.jamon b/service/src/jamon/org/apache/hive/tmpl/QueryProfileTmpl.jamon
@@ -57,7 +57,7 @@ private boolean showStats = false;
       </%if>
     </%if>
     <%if showGraph %>
-      <script type="text/javascript" src="/static/js/vis.min.js"></script>
+      <script type="text/javascript" src="https://unpkg.com/vis[email protected]/standalone/umd/vis-network.min.js"></script>
       <link href="/static/css/query-plan-graph.css" rel="stylesheet">
       <script src="/static/js/query-plan-graph.js"></script>
     </%if>