Hi Expert Team,
Current Production system`s SAP Hybris Version is 1905. As a part of OOTB Core framework, we are using OOTB Bootstrap V3 in current Production environment and it seems Hybris UI packages are tightly coupled to Bootstrap v3.
As part of application security scan on vulnerabilities, we did SAST/DAST scans and Penn testing scan and it has revealed XSS security medium vulnerabilities from Hybris provided Bootstrap v3 OOTB. As suggested by security team, we have to upgraded to Bootstrap version from V3 to v4 to solve these vulnerabilities Bootstrap issue but Hybris UI packages are not yet compatible to v4, Hence we cannot seamlessly move to Bootstrap v4.
The main concern is, the Bootstrap V4 has migrated from LESS to SASS and lessc-rhino.js can not compile SASS files as part of OOTB framework. Even we have checked bootstrap version in latest release patch and it seems same now.
Could you help out how to resolve from this problem and let us know is there any solution alternatives, approaches to resolve this issue.?
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.