New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

A vulnerability found in browserify-hmr #41

Closed

chromium1337 opened this issue Jul 24, 2018 · 1 comment · Fixed by #45

chromium1337 commented Jul 24, 2018

Hi, I found a vulnerability in browserify-hmr, how do I report it to you?

Owner

Macil commented Jul 24, 2018 •

edited

Loading

Thanks for contacting me about this! Email me at agentme49@gmail.com

Macil closed this as completed

Macil reopened this

jeremija mentioned this issue

npm install - vulnerability warning (0.3.7) #43

Closed

jeremija added a commit to jeremija/browserify-hmr that referenced this issue


          Add check for Origin & Host headers

cdb9df8

This commit is an attempt to fix the isuse in NPM security advisory:

https://www.npmjs.com/advisories/726

Further reading:

Macil#41
Macil#43
https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10#commitcomment-31816791<Paste>
https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages

jeremija added a commit to jeremija/browserify-hmr that referenced this issue


          Add check for Origin & Host headers

862626f

This commit is an attempt to fix the isuse in NPM security advisory:

https://www.npmjs.com/advisories/726

Further reading:

Macil#41
Macil#43
https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10#commitcomment-31816791<Paste>
https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages

jeremija mentioned this issue

Add check for Origin & Host headers #45

Merged

Macil closed this as completed in #45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment