Skip to content
This repository was archived by the owner on Mar 20, 2024. It is now read-only.

Conversation

@BHouwens
Copy link
Contributor

Description

Updates the module's Axios dependency to resolve the discovered CSRF vulnerability in earlier versions of the package.

Fixes # 2282582 in HackerOne code audit

Type of Change

Please mark the appropriate option by putting an "x" inside the brackets:

  • Bug fix
  • New feature
  • Enhancement or optimization
  • Documentation update
  • Other (please specify)

Checklist

Put an "x" in the boxes that apply. If you're unsure about any of these, don't hesitate to ask. We're here to help!

  • I have tested the changes locally and they work as expected.
  • I have added necessary documentation or updated existing documentation.
  • My code follows the project's coding standards and style guidelines.
  • I have added/updated relevant tests to ensure the changes are properly covered.
  • I have checked for and resolved any merge conflicts.
  • My commits have clear and descriptive messages.

RobinP122 and others added 17 commits December 19, 2023 12:41
- Only computeHost and passphrase are reqired as configs
- Added specific internal errors for config fields to help with usage
- initFromSeed > fromSeed
- initFromMasterKey > fromMasterKey
- DE and FR version need to be updated.
Major changes in function naming and param order.
Backward compatibilty is affected.
- Saves a KeyPairEncrypted array to LocalStorage
Will only work from a browser environement.
@BHouwens BHouwens requested a review from RobinP122 December 19, 2023 12:01
@BHouwens BHouwens closed this Jan 3, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants