Skip to content

Commit

Permalink
fix(deps): upgrading dependencies to address vulnerability issues (#18)
Browse files Browse the repository at this point in the history
Upgrading the following dependencies:
- webpack
- webpack-cli
- loader-utils
- serialize-javascript
- replacing ugligy-webpack-plugin for terser-webpack-plugin

To address the following vulnerabilities:
- Cross-Site Scripting (XSS)
- Regular Expression Denial of Service (ReDoS) 
- Insecure serialization leading to RCE
  • Loading branch information
elivillalejos authored Aug 22, 2024
1 parent 3043f54 commit 5133d4c
Show file tree
Hide file tree
Showing 4 changed files with 633 additions and 2,434 deletions.
7 changes: 4 additions & 3 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,14 @@
"babel": "^6.23.0",
"babel-loader": "^8.1.0",
"d3": "^5.16.0",
"loader-utils": "1.4.2",
"ssf": "^0.11.0",
"terser-webpack-plugin": "^5.3.10",
"ts-loader": "^7.0.5",
"typescript": "^3.9.3",
"uglifyjs-webpack-plugin": "^2.2.0",
"webpack": "^4.43.0"
"webpack": "^5.94.0"
},
"devDependencies": {
"webpack-cli": "^3.3.11"
"webpack-cli": "^5.1.4"
}
}
2 changes: 1 addition & 1 deletion sunburst.js

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions webpack.config.js
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
var path = require('path')

const UglifyJSPlugin = require('uglifyjs-webpack-plugin');
const TerserPlugin = require('terser-webpack-plugin');

var webpackConfig = {
mode: 'production',
Expand All @@ -17,13 +17,13 @@ var webpackConfig = {
extensions: [".ts", ".js"]
},
plugins: [
new UglifyJSPlugin()
new TerserPlugin()
],
module: {
rules: [
{ test: /\.js$/, loader: "babel-loader" },
{ test: /\.ts$/, loader: "ts-loader" },
{ test: /\.css$/, loader: [ 'to-string-loader', 'css-loader' ] }
{ test: /\.css$/, use: [ {loader: 'to-string-loader'}, {loader: 'css-loader'} ] }
]
},
performance: {
Expand Down
Loading

0 comments on commit 5133d4c

Please sign in to comment.