Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(package) update moment to newest version #12

Merged
merged 1 commit into from Feb 4, 2016
Merged

fix(package) update moment to newest version #12

merged 1 commit into from Feb 4, 2016

Commits on Feb 4, 2016

  1. fix(package) update moment to newest version 

    There was a security advisory affecting moment, updating to 2.11.2
The problem was in moment.duration, which this library doesn't use,
but at least by requiring this version we will 'float' any libraries
that require this and moment ^2.0.0 into using the version that's
patched against the regex DOS.

See moment/moment#2936 for info on the security
vulnerability
    @wraithgar
    wraithgar committed Feb 4, 2016
    Configuration menu
    Copy the full SHA
    a9b9fe7 View commit details
    Browse the repository at this point in the history