Dependabot found a vulnerability in our current bootstrap version: https://github.com/MovingBlocks/movingblocks.github.com/security/dependabot/146
The vulnerability affects the Carousel component which we're using for the Gallery.
We don't use the data-slide and data-slide-to attributes directly and from what I've seen, reactstrap doesn't use them either for their CarouselControl implementation. However, I don't know whether they are used by any of reactstrap's dependencies or any place else, so just to be sure, we should consider upgrading bootstrap to v5.
Upgrading bootstrap v5 would fix this issue, but that breaks the module list pagination (see screenshot below).
We need to figure out the breaking change and adjust our code accordingly if possible.
That's what the upgrade made it look like:
Should look like this instead:
Dependabot found a vulnerability in our current bootstrap version: https://github.com/MovingBlocks/movingblocks.github.com/security/dependabot/146
The vulnerability affects the
Carouselcomponent which we're using for the Gallery.We don't use the
data-slideanddata-slide-toattributes directly and from what I've seen, reactstrap doesn't use them either for theirCarouselControlimplementation. However, I don't know whether they are used by any of reactstrap's dependencies or any place else, so just to be sure, we should consider upgrading bootstrap to v5.Upgrading bootstrap v5 would fix this issue, but that breaks the module list pagination (see screenshot below).
We need to figure out the breaking change and adjust our code accordingly if possible.
That's what the upgrade made it look like:
Should look like this instead:
