frontend-security
Safeguard articles tagged "frontend-security" — guides, analysis, and best practices for software supply chain and application security.
38 articles
jQuery UI Latest Version: Where It Stands and What to Do About It
The jQuery UI latest version is in the 1.14.x line, released in 2024, and the project is now in maintenance mode. Here is what that means for your dependency and its security.
jQuery Cookie: Why jquery.cookie Is Deprecated and What to Use Now
The jquery.cookie plugin is abandoned and carries a known prototype-pollution vulnerability. Here is what changed and how to migrate to js-cookie.
react-select-async-paginate: A Security Guide
react-select-async-paginate is a thin wrapper over react-select that loads dropdown options page by page. Here is how to use it without inheriting supply chain or data-handling risk.
jQuery Validation: A Security Guide to XSS and ReDoS Risks
The jQuery Validation plugin is convenient, but client-side validation is not a security control. Here is where jquery validation has been vulnerable and how to use it safely.
What jQuery Migrate Is and How to Use It Securely
jQuery Migrate helps older code survive newer jQuery releases, but leaning on it can quietly keep you on a vulnerable jQuery version. Here is how to use it without inheriting old XSS bugs.
Bootstrap 4.3.1 and 4.4.1 Vulnerabilities: Audit and Upgrade Guide
What your scanner means when it flags bootstrap 4.3.1 vulnerabilities: the real advisories, the withdrawn one, the jQuery 3.4.1 problem next to it, and a sane upgrade path.
Securing Your Vue Project with eslint-plugin-vue
eslint-plugin-vue is the official linter for Vue single-file components. It is not a security scanner, but used well it removes whole classes of bugs that turn into vulnerabilities.
CVE-2021-41183: jQuery UI Datepicker XSS and How to Fix It
CVE-2021-41183 is a cross-site scripting flaw in the jQuery UI Datepicker's *Text options, fixed in 1.13.0. Here is the risk and the remediation.
The Bootstrap Freelancer Theme: A Security Review Before You Ship It
The Bootstrap Freelancer theme is a popular free portfolio template, but shipping it unchanged pulls in front-end dependencies you need to check first.
react-syntax-highlighter: Rendering Code Safely in React
react-syntax-highlighter is the go-to library for showing code blocks in React apps. Here is how to use it and how to avoid the XSS traps around rendering untrusted code.
Tailwind Vue Components: Vetting Them Before You Ship
Tailwind Vue components speed up UI work, but every third-party component library is a dependency you inherit. Here is how to pick and audit them safely.
React Application Security Guide
Securing React applications from XSS, dependency vulnerabilities, and common frontend attack patterns.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.