Skip to content
This repository was archived by the owner on Sep 3, 2022. It is now read-only.

Commit 3a0e777

Browse files
authored
pin trim version (#219)
* pin trim version * update History.md
1 parent 4f3035c commit 3a0e777

File tree

3 files changed

+10
-4
lines changed

3 files changed

+10
-4
lines changed

HISTORY.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,7 @@
1+
# 4.1.6 / 2020-11-24
2+
3+
- Update `trim` package to address ReDoS vulnerability
4+
15
# 4.1.5 / 2020-09-20
26

37
- Remove `@segment/canonical` in favor of `document.querySelector`

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,7 @@
136136
"browserify": "16.5.2",
137137
"lodash": "4.17.20",
138138
"node-fetch": "2.6.1",
139-
"elliptic": "^6.5.3"
139+
"elliptic": "^6.5.3",
140+
"trim": "^1.0.0"
140141
}
141142
}

yarn.lock

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9475,9 +9475,10 @@ trim-newlines@^3.0.0:
94759475
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-3.0.0.tgz#79726304a6a898aa8373427298d54c2ee8b1cb30"
94769476
integrity sha512-C4+gOpvmxaSMKuEf9Qc134F1ZuOHVXKRbtEflf4NTtuuJDEIJ9p5PXsalL8SkeRw+qit1Mo+yuvMPAKwWg/1hA==
94779477

9478-
9479-
version "0.0.1"
9480-
resolved "https://registry.yarnpkg.com/trim/-/trim-0.0.1.tgz#5858547f6b290757ee95cccc666fb50084c460dd"
9478+
[email protected], trim@^1.0.0:
9479+
version "1.0.0"
9480+
resolved "https://registry.yarnpkg.com/trim/-/trim-1.0.0.tgz#fd1f30b878bdd2d8435fa0f2cc9cbb55f518be7d"
9481+
integrity sha512-UgtES1lYpE+f4WiGY5lyJlHchuGhTa/xMPH96g/B7gc+pEQPiL41s6ECm7Ky3hkhARG/u1SHGFcleJodAvQOKQ==
94819482

94829483
ts-node@^8.10.2:
94839484
version "8.10.2"

0 commit comments

Comments
 (0)