Universal & Javascript-node: Update 'ansi-regex' due to CVE-2021-3807

Author: samruddhikhandale

src/javascript-node/.devcontainer/library-scripts/add-patch.sh

@@ -10,4 +10,7 @@ IMAGE_VARIANT=$1
 if [[ "${IMAGE_VARIANT}" =~ "14" ]] ; then
     cd /usr/local/lib/node_modules/npm
     npm update --save
+
+    cd /usr/local/lib/node_modules/npm/node_modules/string-width
+    npm install ansi-regex --save
 fi

src/javascript-node/test-project/test.sh

@@ -22,6 +22,10 @@ sudo rm -rf node_modules
 git_version=$(git --version)
 check-version-ge "git-requirement" "${git_version}" "git version 2.38.1"
 
+cd /usr/local/lib/node_modules/npm/node_modules/string-width/
+
+ansiVersion=$(npm ls --depth 1 --json | jq -r '.dependencies."ansi-regex".version')
+check-version-ge "ansi-regex" "${ansiVersion}" "6.0.1"
 
 # Report result
 reportResults

src/universal/.devcontainer/local-features/setup-user/install.sh

@@ -58,6 +58,10 @@ NPM_PACKAGES_LIST="decode-uri-component
 cd /usr/local/share/nvm/versions/node/v14*/lib/node_modules/npm
 npm install ${NPM_PACKAGES_LIST}
 
+# ansi-regex: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807
+cd /usr/local/share/nvm/versions/node/v14*/lib/node_modules/npm/node_modules/string-width
+npm install ansi-regex --save
+
 # Temporary: Due to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0536 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0155
 rm -rf /usr/local/nvs/deps/node_modules/follow-redirects/*
 curl -sSL https://github.com/follow-redirects/follow-redirects/archive/refs/tags/v1.15.2.tar.gz | tar -xzC /tmp 2>&1

src/universal/test-project/test.sh

@@ -184,14 +184,19 @@ decodeVersion=$(npm ls --depth 1 --json | jq -r '.dependencies."decode-uri-compo
 check-version-ge "decode-uri-component" "${decodeVersion}" "0.2.1"
 
 ansiVersion=$(npm ls --depth 1 --json | jq -r '.dependencies."ansi-regex".version')
-check-version-ge "ansi-regex" "${ansiVersion}" "6.0.0"
+check-version-ge "ansi-regex" "${ansiVersion}" "6.0.1"
 
 minimatchVersion=$(npm ls --depth 1 --json | jq -r '.dependencies.minimatch.version')
 check-version-ge "minimatch" "${minimatchVersion}" "3.0.5"
 
 gotVersion=$(npm ls --depth 1 --json | jq -r '.dependencies.got.version')
 check-version-ge "got" "${gotVersion}" "12.1.0"
 
+cd /usr/local/share/nvm/versions/node/v14*/lib/node_modules/npm/node_modules/string-width
+
+ansiVersion=$(npm ls --depth 1 --json | jq -r '.dependencies."ansi-regex".version')
+check-version-ge "ansi-regex-2" "${ansiVersion}" "6.0.1"
+
 ls -la /home/codespace
 
 # Report result