Shulou(Shulou.com)11/24 Report--

CTOnews.com, November 6, the OpenJS Foundation recently claimed on its website that based on the results of the IDC survey, nearly 90% of the world's 1.9 billion websites use open source software jQuery, of which at least 750 million are using the old version of jQuery. More than 1/3 of the respondents confirmed that they had experienced relevant "security incidents" in the past 24 months.

▲ Picture Source OpenJS Foundation OpenJS Foundation said:

Eighty-nine per cent of random survey respondents reported that they knew their website used jQuery.

Eighty-five percent of respondents believe that it is extremely important for their own companies to own websites.

Security incidents caused serious business losses, with 28% of respondents saying that they had lost customers and 29% said they had caused a loss of income. In addition, 45% of respondents reported damage to their brands due to security incidents.

Forty-eight percent of respondents said that improving security was their primary motivation for upgrading jQuery.

The OpenJS Foundation believes that business owners and developers have a responsibility to ensure the security of their websites. Although jQuery makes web development easier, many websites still use older versions of jQuery, in which there are more or less security vulnerabilities, and even if the jQuery team issues targeted security fixes, these sites are usually not updated, resulting in a series of "security incidents".

"everyone has a responsibility to ensure the security of their website," said Timmy Willison, head of the jQuery Core team and chief front-end engineer at worbler.ai. "it's not always a simple task, but making sure the package is up-to-date may be a good start, and the jQuery team is happy to work with the OpenJS Foundation as part of this' network inspection campaign'to help improve the security of a range of websites."

The OpenJS Foundation is evaluating its OpenJS Healthy Web inspection tool, which CTOnews.com found is mainly used to test whether the software packages on the website are outdated. The tool is currently in the testing stage and is limited to technical evaluators and OpenJS members, and is scheduled to be fully launched in early 2024.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.