d2a5099fb2
The important update is to the `serialize-javascript` package, which recently released version v2.1.1 to fix a security vulnerability CVE-2019-16769 (https://github.com/advisories/GHSA-h9rv-jmmf-4pgx ), in which regular expressions in the input JS were not properly serialized in the resulting JSON. Since `serialize-javascript` is only used as part of the build process to minify the web app's code (which we control), this vulnerability shouldn't affect us, but in case it does, this PR exists. ### How tested? Manually reloaded the sample app and verified that the basic functions work. Closes #2 |
||
---|---|---|
.. | ||
sample-app |