The important update is to the `serialize-javascript` package,
which recently released version v2.1.1 to fix a security vulnerability
CVE-2019-16769 (https://github.com/advisories/GHSA-h9rv-jmmf-4pgx ),
in which regular expressions in the input JS were not properly serialized
in the resulting JSON. Since `serialize-javascript` is only used as part
of the build process to minify the web app's code (which we control),
this vulnerability shouldn't affect us, but in case it does, this PR exists.
### How tested?
Manually reloaded the sample app and verified that the basic functions work.
Closes#2
This sample application demonstrates the new web client library for
Microsoft Graph notifications, @microsoft/user-notifications-client version 0.1.7
(https://www.npmjs.com/package/@microsoft/user-notifications-client/v/0.1.7 ).
The sample app lets you do the following:
- Sign in using a Microsoft Azure Active Directory user account.
If you'd like to use a personal, free-of-charge Microsoft account,
follow the instructions in the included README file to modify
the sample code.
- Subscribe and unsubscribe for Microsoft Graph notifications.
- Receive push notifications from the Graph notifications server.
- Fetch Graph notifications (notification data is logged to the JavaScript console).
- Update Graph notification state and delete Graph notifications.
To do Azure AD user authentication, this sample app uses the Microsoft
Authentication Library for JavaScript (MSAL.js)
(https://github.com/AzureAD/microsoft-authentication-library-for-js ).
Microsoft recommends you use MSAL when building your Graph notifications
client app, but you can feel free to use any OAuth web authentication
library.
We hope you find this sample app useful!
Code reviewer: Mariah Hart <mariahhart@users.noreply.github.com>
Co-Authored-By: Dan Salajan <razvansalajan@users.noreply.github.com>
Co-Authored-By: Michael Ratanapintha <metathinker@users.noreply.github.com>
Closes#1
Michael Ratanapintha