Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/dataTableOutput() #3998

Merged
merged 5 commits into from
Mar 19, 2024

Conversation

cpsievert
Copy link
Collaborator

@cpsievert cpsievert commented Mar 15, 2024

Closes #3627
Closes #3986
Related rstudio/DT#1130, rstudio/DT#1128, and rstudio/DT#1132

This PR updates datatables.js from v1.10.5 to v1.10.22 to address the security issue discussed in #3627.

It also makes it so renderDataTable()/dataTableOutput() throw a deprecation message to use their {DT} equivalents. Also, if a suitable (upcoming) version of {DT} is available, they automatically dispatch to their {DT} equivalents (renderDT/DTOutput()). In this case, the user will also see a message about setting options(shiny.legacy.datatable = TRUE) if they'd still like the old implementation.

NEWS.md Outdated Show resolved Hide resolved
@cpsievert cpsievert requested a review from jcheng5 March 15, 2024 16:47
@cpsievert cpsievert marked this pull request as ready for review March 15, 2024 16:48
@cpsievert cpsievert changed the title Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/DTOutput() Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/dataTableOutput() Mar 15, 2024
NEWS.md Outdated Show resolved Hide resolved
NEWS.md Outdated Show resolved Hide resolved
@cpsievert cpsievert merged commit 89aaa97 into main Mar 19, 2024
12 checks passed
@cpsievert cpsievert deleted the datatables-deprecate branch March 19, 2024 19:50
cpsievert added a commit to rstudio/shinycoreci that referenced this pull request Mar 20, 2024
cpsievert added a commit to rstudio/shinycoreci that referenced this pull request Mar 20, 2024
* Updates for rstudio/shiny#3998

* Just use legacy for both

* Set the option in the app itself
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Update bundled DataTable.js; deprecate dataTableOutput() Security: DataTables.net prototype pollution
2 participants