Anvil using vulnerable Bootstrap version?

[simon]

Hi folks
I was running my Anvil app through https://www.webpagetest.org/ and it got an A for all dimensions except security, for which it got a B. Looking into the reasons for this, and apparently an old/vulnerable Bootstrap version is being used.

More details at this link. I don’t know enough about these things to be sure if it’s a real-world problem, but maybe this is something the team wants to look into?

Cheers
Simon

[meredydd]

I can confirm that these vulnerability affects parts of Bootstrap that Anvil does not use, so this vulnerability is not exposed

Nevertheless, we’ll get that updated.