2 Commits

Include renames

Author	SHA1	Message	Date
Guangyue Xu	bffee6084d	npm pakage security updates ... Ran the following script to update engine.io and socket.io packages to address the security issue tracked in crbug.com/1447254: `npm run install-deps audit fix --audit-level=critical` Bug: 1447254 Change-Id: Ia617b76882259bdab5259855029353701ff0bc1e Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4551951 Reviewed-by: Danil Somsikov <dsv@chromium.org> Reviewed-by: Brandon Walderman <brwalder@microsoft.com> Commit-Queue: Guangyue Xu <guangyue.xu@microsoft.com>	2023-05-23 16:50:12 +00:00
Brandon Walderman	f64f77e749	Update node_modules to address security vulnerabilities ... This change addresses 2 issues in uglify-js and socket.io-parser. See reports below for details: - https://www.mend.io/vulnerability-database/CVE-2022-37598 - https://nvd.nist.gov/vuln/detail/CVE-2022-2421 The socket.io-parser issue was addressed by running npm audit via the following command: `npm run install-deps audit fix --audit-level=critical` Since audit didn't recognize the uglify-js issue, I updated uglify-js to version 3.13.10 "manually" by adding an entry in manage_node_deps.py. running install-deps to update package-lock.json and then removing the entry from manage_node_deps.py. Bug: None Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9 Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168 Reviewed-by: Benedikt Meurer <bmeurer@chromium.org> Commit-Queue: Brandon Walderman <brwalder@microsoft.com>	2022-11-30 15:19:46 +00:00