Skip to content
This repository was archived by the owner on Apr 16, 2019. It is now read-only.

security patch

Choose a tag to compare

@caridy caridy released this 24 Oct 16:01
· 150 commits to master since this release

Bump express-state dependency to at least v1.0.1, which includes escaping of the javascript blob that holds the state of the app exposed to the client side. More details here:

YahooArchive/express-state#13