Customer experience | Sales, Customer Insights,...

jQuery and JS Libraries in MS Dynamics CRM 8.2 On Prem

(1) Share

Report

Posted on by gurpreet.gill

Hi All,

We have a CRM on Prem 8.2 (8.2.28.11) and on that the clients have request to perform an OWASP scan and in that it highlighted jQuery and JS libraries as vulnerabilities since they are outdated and it asked to update the libraries.

For this we have requested them to raise a ticket to Microsoft however they want us to check out from the community hence posting these questions here.

1. We are aware of the fact that we cannot remove the existing libraries but we can update those but just want to confirm if there is any way to remove the existing libraries?

2. Since these libraries i.e., jQuery and JS are system (CRM) related and not custom how can we justify that it is not custom and system related only as the scan highlighted only the jQuery and JS libraries and no custom code?

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Dengliang Li Microsoft Employee on at

Like (0)

Report

Hi,

You can check the solution layer of these JS and jQuery libraries to determine whether they are system created.

If it is a custom-created library, it will be similar to the following.

Additionally, if these libraries are custom created but managed, then you will need to update the original solution to remove the library, then import the original solution and choose Upgrade to remove the libraries in the environment.

If my answer was helpful, please click Like, and if it solved your problem, please mark it as verified to help other community members find more.
If you have further questions, please feel free to contact me .

Best Regards,
Dengliang Li

Was this reply helpful? Yes No
gurpreet.gill 10 on at

Like (0)

Report

Hi Dengliang Li,

Thank you for your response however when I check I could not find the layering most probably because we are using unmanaged solutions and it is old UI not powerapps. Any other way we can check this is possible.

Was this reply helpful? Yes No