SE-21 - Replace minified bootstrap library commited into luxe-jahia-demo

[jahia-ci]

Imported from Jira, on Thu Jan 30, 2025
Issue: SE-21 in project: Sales Engineering
Priority: Major Type: Task
Reporter: @bpapez (Benjamin Papez)
Assignee: @hduchesne (Hervé Duchesne)
Created: Mon Aug 19, 2024, last updated: Thu Sep 5, 2024
Status: Open
Parent Epic: SE-7 - luxe demo v2 [JIRA] (Delivery)

Links:

• opened during git code review in: SECBACKLOG-12 - Create SBOM for new javascript modules [JIRA]

bootstrap.bundle.min.js is directly committed into the luxe-jahia-demo repo.

We should avoid doing that as it is a security risk, many vulnerability scanners are not detecting it and it is not listed in the SBOM.

It should be obtained through a package manager instead (npm).