Skip to content

Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/dataTableOutput()#3998

Merged
cpsievert merged 5 commits intomainfrom
datatables-deprecate
Mar 19, 2024
Merged

Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/dataTableOutput()#3998
cpsievert merged 5 commits intomainfrom
datatables-deprecate

Conversation

@cpsievert
Copy link
Collaborator

@cpsievert cpsievert commented Mar 15, 2024

Closes #3627
Closes #3986
Related rstudio/DT#1130, rstudio/DT#1128, and rstudio/DT#1132

This PR updates datatables.js from v1.10.5 to v1.10.22 to address the security issue discussed in #3627.

It also makes it so renderDataTable()/dataTableOutput() throw a deprecation message to use their {DT} equivalents. Also, if a suitable (upcoming) version of {DT} is available, they automatically dispatch to their {DT} equivalents (renderDT/DTOutput()). In this case, the user will also see a message about setting options(shiny.legacy.datatable = TRUE) if they'd still like the old implementation.

@cpsievert cpsievert requested a review from jcheng5 March 15, 2024 16:47
@cpsievert cpsievert marked this pull request as ready for review March 15, 2024 16:48
@cpsievert cpsievert changed the title Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/DTOutput() Update datatables.js from 1.10.5 to 1.10.22 and deprecate renderDataTable()/dataTableOutput() Mar 15, 2024
@cpsievert cpsievert merged commit 89aaa97 into main Mar 19, 2024
@cpsievert cpsievert deleted the datatables-deprecate branch March 19, 2024 19:50
cpsievert added a commit to rstudio/shinycoreci that referenced this pull request Mar 20, 2024
cpsievert added a commit to rstudio/shinycoreci that referenced this pull request Mar 20, 2024
* Updates for rstudio/shiny#3998

* Just use legacy for both

* Set the option in the app itself
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update bundled DataTable.js; deprecate dataTableOutput() Security: DataTables.net prototype pollution

2 participants