zzos/react-native-devtools-frontend
1
0
Fork 0
mirror of https://github.com/react/react-native-devtools-frontend.git synced 2026-10-04 11:01:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
c712a3e629da4ac2ec3e1bb1fa4e2fbcb36293c2
react-native-devtools-frontend/node_modules/cookie/HISTORY.md
T
Brandon Walderman f64f77e749 Update node_modules to address security vulnerabilities 
This change addresses 2 issues in uglify-js and socket.io-parser. See
reports below for details:
- https://www.mend.io/vulnerability-database/CVE-2022-37598
- https://nvd.nist.gov/vuln/detail/CVE-2022-2421

The socket.io-parser issue was addressed by running npm audit via the
following command:

`npm run install-deps audit fix --audit-level=critical`

Since audit didn't recognize the uglify-js issue, I updated uglify-js
to version 3.13.10 "manually" by adding an entry in
manage_node_deps.py. running install-deps to update package-lock.json
and then removing the entry from manage_node_deps.py.

Bug: None
Change-Id: I29238b14773a1b94b973886b0bb700f50e45cfa9
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/4061168
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Commit-Queue: Brandon Walderman <brwalder@microsoft.com>
2022-11-30 15:19:46 +00:00

2.9 KiB
Raw Blame History

0.4.2 / 2022-02-02

  • pref: read value only when assigning in parse
  • pref: remove unnecessary regexp in parse

0.4.1 / 2020-04-21

  • Fix maxAge option to reject invalid values

0.4.0 / 2019-05-15

  • Add SameSite=None support

0.3.1 / 2016-05-26

  • Fix sameSite: true to work with draft-7 clients
    • true now sends SameSite=Strict instead of SameSite

0.3.0 / 2016-05-26

  • Add sameSite option
    • Replaces firstPartyOnly option, never implemented by browsers
  • Improve error message when encode is not a function
  • Improve error message when expires is not a Date

0.2.4 / 2016-05-20

  • perf: enable strict mode
  • perf: use for loop in parse
  • perf: use string concatination for serialization

0.2.3 / 2015-10-25

  • Fix cookie Max-Age to never be a floating point number

0.2.2 / 2015-09-17

  • Fix regression when setting empty cookie value
    • Ease the new restriction, which is just basic header-level validation
  • Fix typo in invalid value errors

0.2.1 / 2015-09-17

  • Throw on invalid values provided to serialize
    • Ensures the resulting string is a valid HTTP header value

0.2.0 / 2015-08-13

  • Add firstPartyOnly option
  • Throw better error for invalid argument to parse
  • perf: hoist regular expression

0.1.5 / 2015-09-17

  • Fix regression when setting empty cookie value
    • Ease the new restriction, which is just basic header-level validation
  • Fix typo in invalid value errors

0.1.4 / 2015-09-17

  • Throw better error for invalid argument to parse
  • Throw on invalid values provided to serialize
    • Ensures the resulting string is a valid HTTP header value

0.1.3 / 2015-05-19

  • Reduce the scope of try-catch deopt
  • Remove argument reassignments

0.1.2 / 2014-04-16

  • Remove unnecessary files from npm package

0.1.1 / 2014-02-23

  • Fix bad parse when cookie value contained a comma
  • Fix support for maxAge of 0

0.1.0 / 2013-05-01

  • Add decode option
  • Add encode option

0.0.6 / 2013-04-08

  • Ignore cookie parts missing =

0.0.5 / 2012-10-29

  • Return raw cookie value if value unescape errors

0.0.4 / 2012-06-21

  • Use encode/decodeURIComponent for cookie encoding/decoding
    • Improve server/client interoperability

0.0.3 / 2012-06-06

  • Only escape special characters per the cookie RFC

0.0.2 / 2012-06-01

  • Fix maxAge option to not throw error

0.0.1 / 2012-05-28

  • Add more tests

0.0.0 / 2012-05-28

  • Initial release
Reference in New Issue View Git Blame Copy Permalink