Nextcloud version 17.0.0:
Operating system and version Debian 10:
Apache or nginx version nginx/1.14.2:
PHP version 7.3.11-1~deb10u1:
The issue you are facing:
I recently setup Google’s Cloud Web Security Scanner to test all websites hosted in my environment. After the first run I got a notification that the version of jquery used on the login page for Nextclould seems to be quite old,
jquery 2.1.4. See the below screen shot for the full message.
Basically, I am wondering if this is an actual issue or if I have somehow configured my Nextcloud configuration incorrectly. I set this installation up on NC 13 I think, following the upgrade path to the current release. I have continued to keep my NGINX setup as described in: https://docs.nextcloud.com/server/latest/admin_manual/installation/nginx.html#nextcloud-in-the-webroot-of-nginx. I realize this could be a legacy library that was not removed during one of my upgrades, but would appreciate steps to safely remove or test for that as this is a production system.
I found this github issue: https://github.com/nextcloud/server/issues/6720 but it looks like nothing was closed out with that one. I also found this mention of versions https://github.com/nextcloud/server/issues/4628 and it looks like that was added to a backlog queue so if that is what I should watch please let me know!
Is this the first time you’ve seen this error? Y:
Steps to replicate it:
- Add server URL to Google Cloud Web Security Scanner.
- Wait for scan to finish.
The output of your config.php file in
/path/to/nextcloud (make sure you remove any identifiable information!):
<?php $CONFIG = array ( 'instanceid' => '', 'passwordsalt' => '', 'secret' => '', 'trusted_domains' => array ( 0 => '', ), 'datadirectory' => '', 'overwrite.cli.url' => '', 'dbtype' => 'mysql', 'version' => '22.214.171.124', 'dbname' => '', 'dbhost' => '', 'dbport' => '', 'dbtableprefix' => 'oc_', 'dbuser' => '', 'dbpassword' => '', 'logtimezone' => 'America/Los_Angeles', 'installed' => true, 'mail_from_address' => 'nextcloud', 'mail_smtpmode' => 'smtp', 'mail_domain' => '', 'maintenance' => false, 'memcache.local' => '\\OC\\Memcache\\Redis', 'redis' => array ( 'host' => 'localhost', 'port' => 6379, 'timeout' => 0.0, ), 'memcache.locking' => '\\OC\\Memcache\\Redis', 'updater.release.channel' => 'stable', 'theme' => '', 'loglevel' => 0, 'log_rotate_size' => 209715200, 'mail_smtpauthtype' => 'LOGIN', 'mail_smtphost' => '', 'mail_smtpport' => '', 'knowledgebaseenabled' => false, 'trashbin_retention_obligation' => 'auto, 30', 'enable_previews' => true, 'mail_smtpsecure' => 'tls', 'mail_sendmailmode' => 'smtp', 'mail_smtpauth' => 1, 'mail_smtpname' => '', 'mail_smtppassword' => '', 'mysql.utf8mb4' => true, 'allowNightlyUpdates' => array ( 0 => 'passwords', ), 'app_install_overwrite' => array ( 0 => 'ocsms', ), );
The output of your Apache/nginx/system log in
Can attach if needed.