Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: security vulnerability at readme in dompurify dep #1532

Merged
merged 1 commit into from
Oct 23, 2019

Conversation

juanpicado
Copy link
Member

Fix Cross-site Scripting (XSS) in @verdaccio/readme

https://app.snyk.io/vuln/SNYK-JS-DOMPURIFY-474012

Fix Cross-site Scripting (XSS) in @verdaccio/readme
@codecov
Copy link

codecov bot commented Oct 23, 2019

Codecov Report

Merging #1532 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #1532   +/-   ##
=======================================
  Coverage   84.88%   84.88%           
=======================================
  Files          47       47           
  Lines        2475     2475           
  Branches      571      571           
=======================================
  Hits         2101     2101           
  Misses        370      370           
  Partials        4        4

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 44c79ad...fd200b4. Read the comment docs.

@juanpicado juanpicado merged commit 2ac7770 into master Oct 23, 2019
@delete-merged-branch delete-merged-branch bot deleted the fix-readme-dep branch October 23, 2019 18:49
@lock
Copy link

lock bot commented Nov 2, 2019

🤖This thread has been automatically locked 🔒 since there has not been any recent activity after it was closed.
We lock tickets after 90 days with the idea to encourage you to open a ticket with new fresh data and to provide you better feedback 🤝and better visibility 👀.
If you consider, you can attach this ticket 📨 to the new one as a reference for better context.
Thanks for being a part of the Verdaccio community! 💘

@lock lock bot locked as resolved and limited conversation to collaborators Nov 2, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants