pkp/pkp-lib#9753 [stable-3_3_0] Update jquery, jquery-ui and chart.js to address security vulnerability reports

.gitignore

@@ -2,4 +2,5 @@ te_ST/
 lib/tinymce/jscripts/tiny_mce/*.gz
 lib/vendor
 lib/components
-.DS_Store
+.DS_Store
+js/lib/jquery/plugins/validate/

classes/dev/ComposerScript.php

@@ -0,0 +1,54 @@
+<?php
+/**
+ * @file classes/dev/ComposerScript.php
+ *
+ * Copyright (c) 2024 Simon Fraser University
+ * Copyright (c) 2024 John Willinsky
+ * Distributed under the GNU GPL v3. For full terms see the file docs/COPYING.
+ *
+ * @class ComposerScript
+ *
+ * @brief Custom composer scripts to run post installs/updates
+ */
+
+namespace PKP\dev;
+
+use Exception;
+
+require_once '../../tools/bootstrap.inc.php';
+import('lib.pkp.classes.file.FileManager');
+
+class ComposerScript
+{
+	/**
+	 * A post-install-cmd custom composer script that
+	 * copies composer installs from repositories
+	 * to the correct/existing directories of the following dependencies:
+	 * jquery-ui and jquery validation
+	 */
+	public static function copyVendorAssets(): void
+	{
+		$fileManager = new \FileManager();
+		$vendorBaseDir = __DIR__ . '/../../lib/vendor';
+		$jsPluginsDir = __DIR__ . '/../../js/lib';
+
+		$source = [
+			'jquery-ui.js' => $vendorBaseDir . '/jquery/ui/dist/jquery-ui.js',
+			'jquery-ui.min.js' => $vendorBaseDir . '/jquery/ui/dist/jquery-ui.min.js',
+			'jquery-validate' => $vendorBaseDir . '/jquery/validation/dist'
+		];
+
+		$dest = [
+			'jquery-ui.js' => $vendorBaseDir . '/components/jqueryui/jquery-ui.js',
+			'jquery-ui.min.js' => $vendorBaseDir . '/components/jqueryui/jquery-ui.min.js',
+			'jquery-validate' => $jsPluginsDir . '/jquery/plugins/validate'
+		];
+
+		// jQuery UI
+		$fileManager->copyFile($source['jquery-ui.js'], $dest['jquery-ui.js']) || throw new Exception('Failed to copy jquery-ui.js to destination folder');
+		$fileManager->copyFile($source['jquery-ui.min.js'], $dest['jquery-ui.min.js']) || throw new Exception('Failed to copy jquery-ui.min.js to destination folder');
+
+		// jQuery Validation
+		$fileManager->copyDir($source['jquery-validate'], $dest['jquery-validate']) || throw new Exception('Failed to copy jquery-validate to destination folder');
+	}
+}

classes/file/FileManager.inc.php

@@ -306,6 +306,11 @@ function deleteByPath($filePath) {
 	 * @return boolean returns true if successful
 	 */
 	function mkdir($dirPath, $perms = null) {
+		if (is_dir($dirPath)) {
+			// Directory already exists, no need to create it
+			return true;
+		}
+
 		if ($perms !== null) {
 			return mkdir($dirPath, $perms);
 		} else {

composer.json

@@ -1,8 +1,6 @@
 {
 	"require": {
 		"ralouphie/getallheaders": "*",
-		"components/jqueryui": "1.*",
-		"components/jquery": "^3.5",
 		"wikimedia/less.php": "3.*",
 		"phpmailer/phpmailer": "6.*",
 		"smarty/smarty": "^4.3",
@@ -25,7 +23,10 @@
 		"staudenmeir/laravel-upsert": "^1.3",
 		"cweagans/composer-patches": "^1.7",
 		"composer/semver": "*",
-		"php81_bc/strftime": "^0.5.0"
+		"php81_bc/strftime": "^0.5.0",
+		"components/jquery": "3.7.1",
+		"jquery/ui": "1.13.3",
+		"jquery/validation": "1.19.5"
 	},
 	"require-dev": {
 		"phpunit/phpunit": "~9",
@@ -41,10 +42,40 @@
 			"cweagans/composer-patches": true
 		}
 	},
+	"scripts": {
+		"post-install-cmd": [
+			"@copyVendorAssets"
+		],
+		"copyVendorAssets": [
+			"PKP\\dev\\ComposerScript::copyVendorAssets"
+		]
+	},
 	"repositories": [
 		{
 			"type": "vcs",
 			"url": "https://github.com/asmecher/ADOdb"
+		},
+		{
+			"type": "package",
+			"package": {
+				"name": "jquery/ui",
+				"version": "1.13.3",
+				"dist": {
+					"url": "https://registry.npmjs.org/jquery-ui/-/jquery-ui-1.13.3.tgz",
+					"type": "tar"
+				}
+			}
+		},
+		{
+			"type": "package",
+			"package": {
+				"name": "jquery/validation",
+				"version": "1.19.5",
+				"dist": {
+					"url": "https://registry.npmjs.org/jquery-validation/-/jquery-validation-1.19.5.tgz",
+					"type": "tar"
+				}
+			}
 		}
 	],
 	"extra": {
@@ -85,5 +116,10 @@
 				"Apply strftime locale patch": "lib/strftime-locale-patch.diff"
 			}
 		}
+	},
+	"autoload": {
+		"psr-4": {
+			"PKP\\": "classes/"
+		}
 	}
 }