appmetrics icon indicating copy to clipboard operation
appmetrics copied to clipboard

Upgrade jszip to 3.x to resolve CVE-2021-23413

Open lux01 opened this issue 4 years ago • 0 comments

Appmetrics currently uses [email protected] which has a prototype pollution vulnerability:

This PR upgrades the jszip dependency to ^3.7.0 and consequently tweaks the headless_zip.js functions to be more async friendly as zip.generate() has been replaced by zip.generateAsync().

This fixes #655.

Additionally I had to fix a unit test failure that occurs when running on macOS 11 (caused by os.name now returning macOS rather than Mac OS X) to ensure my changes still passed the unit tests.

lux01 avatar Sep 29 '21 09:09 lux01