Главная Обзор Помощь
Вход
yunoadmin
/
bambuddy
зеркало из https://github.com/maziggy/bambuddy
1
0
Ответвить 0
Файлы Задачи 0 Вики
Просмотр исходного кода

security(frontend): bump react-router-dom to 7.18.1 for patched release

Moves react-router-dom/react-router 7.16.0 -> 7.18.1, off the range
flagged by GHSA-wrjc-x8rr-h8h6 (open redirect via backslash in Link/
useNavigate), GHSA-h8fp-f39c-q6mh (RSC), and GHSA-337j-9hxr-rhxg (SSR
hydration). The latter two need RSC/SSR, neither of which this
client-only SPA uses; the open-redirect one is the only reachable path
(post-login redirect), already guarded by sanitizeRedirectTarget.

Stays within the existing ^7.16.0 caret, no new transitive deps. Rebuilt
the static bundle. npm audit now reports 0 vulnerabilities.
maziggy 1 месяц назад
Родитель
83ac5b361c
Сommit
a273cd3eec
3 измененных файлов с 9 добавлено и 12 удалено
Единый вид Показать статистику Diff
  1. 8 11
      frontend/package-lock.json
  2. 0 0
      static/assets/index-ByvLwk1T.js
  3. 1 1
      static/index.html

+ 8 - 11
frontend/package-lock.json
Просмотреть файл 

@@ -7619,10 +7619,9 @@
 
       }
 
       }
 
     },
 
     },
 
     "node_modules/react-router": {
 
     "node_modules/react-router": {
 
-      "version": "7.16.0",
 
-      "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.16.0.tgz",
 
-      "integrity": "sha512-wArC8lVyJb3+jM9OpDyW6hLCizACWkvQR/sSGqSs+o5uEXEtGlqdZ4v8hENR3Jad6i+LRkK93q/+bQAcvl6V1A==",
 
-      "license": "MIT",
 
+      "version": "7.18.1",
 
+      "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.1.tgz",
 
+      "integrity": "sha512-GDLgg3i3uM0aeJO3Fm+TCS+sDQ7gu12T6x0qdTEzcwqEfleci7JwugVNIF3U//0FWKnJT7ptG+20B2jfDqnZAg==",
 
       "dependencies": {
 
       "dependencies": {
 
         "cookie": "^1.0.1",
 
         "cookie": "^1.0.1",
 
         "set-cookie-parser": "^2.6.0"
 
         "set-cookie-parser": "^2.6.0"
 
@@ -7641,12 +7640,11 @@
 
       }
 
       }
 
     },
 
     },
 
     "node_modules/react-router-dom": {
 
     "node_modules/react-router-dom": {
 
-      "version": "7.16.0",
 
-      "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.16.0.tgz",
 
-      "integrity": "sha512-kMUAbimWB5FVbF4Bce4bJsiKJWLIUHq/mEG8+CFDnCSgltptBiG5nguducmsJeGKytlCvQud9Qhzpn49iduTlA==",
 
-      "license": "MIT",
 
+      "version": "7.18.1",
 
+      "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.18.1.tgz",
 
+      "integrity": "sha512-KaZh+X/6UtEp28x51AUYZDMg9NGoz2ja3dNHa+ta/tk40vCzKhQ/RypCWBMLbmDr6//E24Vv5uPsrqXFozdkAg==",
 
       "dependencies": {
 
       "dependencies": {
 
-        "react-router": "7.16.0"
 
+        "react-router": "7.18.1"
 
       },
 
       },
 
       "engines": {
 
       "engines": {
 
         "node": ">=20.0.0"
 
         "node": ">=20.0.0"
 
@@ -7930,8 +7928,7 @@
 
     "node_modules/set-cookie-parser": {
 
     "node_modules/set-cookie-parser": {
 
       "version": "2.7.2",
 
       "version": "2.7.2",
 
       "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
 
       "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
 
-      "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==",
 
-      "license": "MIT"
 
+      "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw=="
 
     },
 
     },
 
     "node_modules/setimmediate": {
 
     "node_modules/setimmediate": {
 
       "version": "1.0.5",
 
       "version": "1.0.5",

Разница между файлами не показана из-за своего большого размера
+ 0 - 0
static/assets/index-ByvLwk1T.js


+ 1 - 1
static/index.html
Просмотреть файл 

@@ -26,7 +26,7 @@
 
 
 
     <!-- Splash screens for iOS -->
 
     <!-- Splash screens for iOS -->
 
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
 
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
 
-    <script type="module" crossorigin src="/assets/index-DMXg01ou.js"></script>
 
+    <script type="module" crossorigin src="/assets/index-ByvLwk1T.js"></script>
 
     <link rel="stylesheet" crossorigin href="/assets/index-kl51qImb.css">
 
     <link rel="stylesheet" crossorigin href="/assets/index-kl51qImb.css">
 
   </head>
 
   </head>
 
   <body>
 
   <body>

Некоторые файлы не были показаны из-за большого количества измененных файлов