x/tools/cmd/godoc: jquery can be updated to a newer version

[joegrasse]

The version of jquery in godoc is susceptible to a security vulnerability.

[toothrot]

/cc @dmitshur

[dmitshur]

Thanks for the report.

The godoc command does not have code paths that involve passing HTML from untrusted sources, so I don't believe this is a security issue. If you think I'm missing something, please use the "Flagging Existing Issues as Security-related" process described at https://golang.org/security.

It can still be updated to a newer version.

[l-lindsay]

Any intention on upgrading jquery to a later version? Seeing this issue pop up in a scan.

[Brookke]

Looks like there's a fix for this awaiting review: golang/tools#250

[bcmills]

(CC @golang/security)

[gmonni]

Hello would be possible upgrading jquery to 3.51. Security scanners identify the following vulnerabilities re jquery version currently in use?