XSS vulnerability with included bootstrap v3.3.5

[Soggywaters]

Was using these HTML templates as a base for my custom policies when I noticed that the bootstrap version with these base files comes with v.3.3.5, which is highlighted as a vulnerability with XSS.

See here:
https://security.snyk.io/package/npm/bootstrap/3.3.5
https://security.snyk.io/vuln/npm:bootstrap:20160627

Should probably update the version to at least v3.4.1 to help protect devs who use these base templates from XSS.

[Soggywaters]

Created a PR if interested: https://github.com/azure-ad-b2c/html-templates/pull/18/files

[Havunen]

The security issue is about the javascript tho... not CSS