Skip to content
This repository has been archived by the owner on Apr 3, 2019. It is now read-only.

fix(nsp): fix nsp warnings #2443

Merged
merged 2 commits into from
May 16, 2018
Merged

fix(nsp): fix nsp warnings #2443

merged 2 commits into from
May 16, 2018

Conversation

philbooth
Copy link
Contributor

@philbooth philbooth commented May 16, 2018

One is fixed by updating base64url, no associated code changes necessary.

The other one I think we're okay on because we only send validated input to request (the service param).

@mozilla/fxa-devs r?

@ghost ghost assigned philbooth May 16, 2018
@ghost ghost added the waffle:active label May 16, 2018
@philbooth philbooth requested a review from a team May 16, 2018 20:13
Copy link
Contributor

@rfk rfk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Even if our validation fails:

on Node.js 4.x and below.

I can live with that; r+ with a formatting nit

.nsprc Outdated
"https://nodesecurity.io/advisories/568"
"https://nodesecurity.io/advisories/568",
// stringstream, loaded indirectly via request, only passed validated data (service)
"https://nodesecurity.io/advisories/664"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

offset indentation here?

.nsprc Outdated
"https://nodesecurity.io/advisories/568"
"https://nodesecurity.io/advisories/568",
// stringstream, loaded indirectly via request, only passed validated data (service)
"https://nodesecurity.io/advisories/664"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

offset indentation here?

@philbooth philbooth merged commit 2b663dd into master May 16, 2018
@ghost ghost removed the waffle:review label May 16, 2018
@philbooth philbooth deleted the pb/nsp branch May 16, 2018 21:30
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants