There are known bugs/vulnerabilities in jQuery 1.12.*, which is what we are currently using. We should update to jQuery 3.4.*, which will require some effort. (Not just code we've written: I think our treeview control isn't quite compatible, since it uses $.parseJSON, which has been deprecated, for instance.) There exists a jQuery migration tool (https://blog.jquery.com/2016/05/19/jquery-migrate-1-4-1-released-and-the-path-to-jquery-3-0/, https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/) to help with this...