From 9223ed237af739ed7ce9f3d4a18d634411d3ed99 Mon Sep 17 00:00:00 2001 From: Feross Aboukhadijeh Date: Tue, 4 Apr 2017 18:15:22 -0700 Subject: [PATCH] changelog --- CHANGELOG.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 87b74ed7d..11dc6b954 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -24,12 +24,14 @@ unnecessary support tickets for project maintainers. Some deprecated APIs are even insecure (or at least prone to incorrect usage) which can have serious security implications. For that reason, `standard` now prevents -usage of `Buffer(num)` or `new Buffer(num)` since these functions return uninitialized -program memory which could contain private user information, secret keys, etc. -Instead of `Buffer(num)` use the new `Buffer.alloc(num)` or `Buffer.from(obj)` -functions which make programmer intent clearer and work in all currently supported -versions of Node.js, including Node.js 4.x. For more background, -[see this Node.js issue](https://github.com/nodejs/node/issues/4660). +usage of `Buffer(num)` or `new Buffer(num)` since these functions return +uninitialized program memory which could contain private user information or +confidential secret keys. + +Instead of `Buffer(num)`, consider using `Buffer.alloc(num)` or `Buffer.from(obj)` +which make the programmer intention much clearer. These new functions exist in all +currently supported versions of Node.js, including Node.js 4.x. For more +background, [see this Node.js issue](https://github.com/nodejs/node/issues/4660). We also improved some rules to support common patterns in code bases that use React, JSX, and Flow.