I've seen the document you refer to, and it's latest report is the jQuery for version Q3 2014.  It doesn't say anything about versions after that.  It's still 1.11 for Q1 2016?

 For almost every prior release, the page shows that the jQuery version was upgraded.  But for the last 5 release, there are no updates of jQuery version? Seems odd.

I was under the impression that, like a lot of tools, support for older IE versions was being phased out of the telerik asp.net control suite.  Meaning you could move to the far faster jQuery 2.x versions.  Is there any timeline for that?

Hi Pavlina 

I am now using 'Telerik_UI_for_ASP.NET_AJAX_2016_2_531_Dev_hotfix', and it is still using 1.11.1. Do you have any updates on when you will upgrade to 1.12.3 or newer? Clients are complaining that the system uses old jQuery because of the XSS vulnerability fixed in 1.12.3, https://github.com/jquery/jquery/commit/cfe830eefdd7f1e7cb87e9841d1d732d6d99ffae

pev

Thank you for a quick answer.

Is this "task" present in a public tracker? So I can follow the status.

pev

Hi Pavlina!

Are there any news on the jQuery update?

Any chance it will be in a SP for Q2? Can you confirm it will be present i Q3?

pev

Are there any plans on upgrading the jQuery version, which is now in version 3 already? The last time you upgraded the internal jQuery version was in 2014!

It is not realistic to force users to load two different versions of jQuery and if loading a newer version can break your controls, then what is the use?

Hi Curtis,

You can add jQuery3 to your page without breaking our controls, we use the .noConflict method to put the jQuery we bring in the window.$telerik.$ variable, so the window.$ and window.jQuery objects are free for you to use.

We are working on improving compatibility with jQuery 3 in upcoming releases (R2 2017 SP1 and R3 2017), even though official support for other jQuery versions is not planned. After that, you will be able to disable the embedded jQuery and add your own v3 to the page so there is only one version on the page: http://docs.telerik.com/devtools/aspnet-ajax/controls/scriptmanager/disabling-the-embedded-jquery.

Regards,

Hi Marin,

That's great news to hear the jQuery 3 support. So just to validate, to be able to use jQuery 3 and be able to disable the embedded jQuery (to help keep page size small), we should wait until R2 2017 SP1 and R3 2017, correct? If we were to do that today, control functionality could break?

Hi Curtis,

Right now jQuery3 may break some things in our controls. R2 2017 SP1 will be the first release to bring workarounds. After that other workarounds may get implemented, depending on what gets reported and its severity.

On the size - the MS AJAX library alone is almost 500kb in debug mode, and 150kb in Release mode. Add a simple script manager to a page and monitor the network traffic.

This does not take into account the other scripts and stylesheets on the page which often amount to several MB. So, the 90kb of the embedded jQuery are not likely to be the biggest hit on performance. If you enable the various CDNs, such resources will get cached and speed will improve greatly.

Regards,

Thanks for the confirmation and quick response Marin!

I hear what you are saying, but when SEO and pagespeed are critical, we are cognizant of every KB that is sent over the wire! We strive to keep our entire content well below 1 MB.

Hi Allen,

Thank you for the great idea!

Currently, the information you are looking for is available in the following sections of the Using jQuery article:

• jQuery Version History in Telerik UI Controls - here you can see which version of jQuery is distributed by the different versions of the Telerik.Web.UI.dll assembly.
• Embedded jQuery Security - provides information on the backported fixes in the modified jQuery 1.12.4 distributed by the Telerik AJAX controls.

Regards,
Rumen
Progress Telerik