grafana/public/sass
JsEnthusiast c78c2d7231
Security: Remove unused Bootstrap v2.3.2 vendor files (#114339)
Removes Bootstrap v2.3.2 files that are not used in the codebase
but are flagged by security vulnerability scanners.

Changes:
- Removed public/vendor/bootstrap/ directory
- Removed public/vendor/tagsinput/bootstrap-tagsinput.js
- Removed .bootstrap-tagsinput CSS block from public/sass/_angular.scss

These files were replaced by modern React components during the
Angular to React migration. The TagsInput functionality is now
provided by packages/grafana-ui/src/components/TagsInput/TagsInput.tsx.

Bootstrap v2.3.2 (from 2013) has known CVEs but poses no actual risk
since the files are not loaded or executed. This change eliminates
false-positive security scan alerts.

Evidence:
- No import statements found for these files
- No script tags loading bootstrap.js
- No webpack bundling of vendor files
- Modern React TagsInput component in use
- Last modified: June 2022 (security patch only)
2026-01-08 15:23:32 +00:00
..
base Chore: migrate _grid SCSS styles to emotion globals (#92986) 2024-09-05 16:39:12 +01:00
_angular.scss Security: Remove unused Bootstrap v2.3.2 vendor files (#114339) 2026-01-08 15:23:32 +00:00
_grafana.scss Chore: migrate _grid SCSS styles to emotion globals (#92986) 2024-09-05 16:39:12 +01:00
_variables.dark.generated.scss Chore: Update generated scss (#111090) 2025-09-15 12:23:10 +00:00
_variables.generated.scss Themes: Update themes border radius (#111478) 2025-09-25 14:53:54 +02:00
_variables.light.generated.scss Theme: Changes light theme canvas color a more white shade (#111318) 2025-09-23 12:11:14 +02:00
grafana.dark.scss Make clear that variable scss files are generated from templates 2019-02-18 11:03:52 +01:00
grafana.light.scss Make clear that variable scss files are generated from templates 2019-02-18 11:03:52 +01:00
icons.json tech: ran prettier on all scss files 2017-12-19 16:22:41 +01:00