fxa-content-server/package.json

167 строки
6.5 KiB
JSON
Исходник Обычный вид История

{
2013-11-16 03:19:00 +04:00
"name": "fxa-content-server",
2019-01-23 00:29:32 +03:00
"version": "1.129.0",
2013-12-04 23:18:07 +04:00
"description": "Firefox Accounts Content Server",
"scripts": {
"build-production": "NODE_ENV=production grunt build",
"postinstall": "scripts/download_l10n.sh",
"prepush": "npm run lint && grunt sasslint",
"shrink": "npmshrink",
"lint": "eslint app server tests --cache",
"lint:deps": "npm audit --json | audit-filter --nsp-config=.nsprc --audit=-",
"start": "node scripts/check-local-config && grunt server",
"start-circle": "CONFIG_FILES=server/config/local.json,server/config/production.json,tests/ci/config_circleci.json node_modules/.bin/grunt build && CONFIG_FILES=server/config/local.json,server/config/production.json,tests/ci/config_circleci.json node_modules/.bin/grunt serverproc:dist",
"start-production": "NODE_ENV=production grunt build && CONFIG_FILES=server/config/local.json,server/config/production.json grunt serverproc:dist",
"start-remote": "scripts/run_remote_dev.sh",
"test": "node tests/intern.js --unit=true",
"test-circle": "node tests/intern.js --suites=circle --fxaAuthRoot=https://fxaci.dev.lcip.org/auth --fxaEmailRoot=http://restmail.net --fxaOAuthApp=https://oauth-fxaci.dev.lcip.org --fxaUntrustedOauthApp=https://321done-fxaci.dev.lcip.org --fxaProduction=true --bailAfterFirstFailure=true",
"test-functional": "node tests/intern.js",
"test-functional-oauth": "node tests/intern.js --suites=oauth",
"test-latest": "node tests/intern.js --fxaAuthRoot=https://latest.dev.lcip.org/auth/v1 --fxaContentRoot=https://latest.dev.lcip.org/ --fxaEmailRoot=http://restmail.net --fxaOAuthApp=https://123done-latest.dev.lcip.org/ --fxaUntrustedOauthApp=https://321done-latest.dev.lcip.org/ --fxaProduction=true --fxaToken=https://token.dev.lcip.org/1.0/sync/1.5",
"test-server": "node tests/intern.js --suites=server",
"test-travis": "node tests/intern.js --suites=travis"
},
"repository": {
"type": "git",
2013-11-16 03:19:00 +04:00
"url": "https://github.com/mozilla/fxa-content-server"
},
2013-11-16 03:19:00 +04:00
"homepage": "https://github.com/mozilla/fxa-content-server",
"bugs": "https://github.com/mozilla/fxa-content-server/issues",
"author": "Mozilla (https://mozilla.org/)",
"license": "MPL-2.0",
"dependencies": {
"autoprefixer": "9.0.1",
"babel-core": "6.26.0",
"babel-loader": "7.1.2",
"babel-plugin-syntax-dynamic-import": "6.18.0",
"babel-plugin-transform-class-properties": "6.24.1",
"babel-preset-es2015": "6.24.1",
"backbone": "1.1.1",
"backbone.cocktail": "git://github.com/onsi/cocktail.git#87971c88e2e4f904a0984b5f236ee5dbb21ddb4a",
"base32-decode": "1.0.0",
"base64url": "3.0.0",
"blueimp-canvas-to-blob": "2.1.0",
"body-parser": "1.18.2",
"celebrate": "7.0.3",
"connect-cachify": "0.0.17",
"consolidate": "0.14.5",
"convict": "1.5.0",
"cookie-parser": "1.4.3",
"cors": "2.8.4",
"css-loader": "1.0.0",
"duration-js": "3.6.0",
"es6-promise": "4.2.4",
"expose-loader": "0.7.5",
"express": "4.16.2",
"extend": "3.0.1",
"extract-loader": "2.0.1",
"file-loader": "1.1.11",
"fxa-common-password-list": "0.0.2",
"fxa-crypto-relier": "2.3.0",
"fxa-geodb": "1.0.4",
"fxa-js-client": "1.0.7",
"fxa-mustache-loader": "0.0.2",
"fxa-shared": "1.0.15",
"got": "6.7.1",
"grunt": "1.0.3",
"grunt-babel": "6.0.0",
"grunt-cdn": "0.6.5",
"grunt-contrib-clean": "1.1.0",
"grunt-contrib-concat": "1.0.1",
2016-04-15 18:35:33 +03:00
"grunt-contrib-copy": "1.0.0",
"grunt-contrib-cssmin": "2.1.0",
"grunt-contrib-htmlmin": "2.4.0",
"grunt-file-rev": "1.0.2",
2016-04-15 18:35:33 +03:00
"grunt-githash": "0.1.3",
"grunt-po2json": "git://github.com/shane-tomlinson/grunt-po2json.git#2f415c8",
"grunt-remarkable": "1.1.0",
"grunt-sri": "0.0.5",
"grunt-text-replace": "0.4.0",
"grunt-usemin": "3.1.1",
"grunt-z-schema": "0.1.0",
"handlebars": "4.0.11",
"happypack": "5.0.0",
"helmet": "3.8.2",
"i18n-abide": "0.0.26",
"joi": "10.4.1",
"jquery": "3.1.0",
"jquery-modal": "git://github.com/shane-tomlinson/jquery-modal.git#0576775d1b4590314b114386019f4c7421c77503",
"jquery-simulate": "1.0.2",
"jquery-ui": "1.12.1",
"jquery-ui-touch-punch-amd": "1.0.0",
"js-md5": "0.6.0",
"jsxgettext-recursive-next": "1.1.0",
"legal-docs": "git://github.com/mozilla/legal-docs.git#master",
"load-grunt-tasks": "3.5.2",
"lodash": "4.17.5",
2018-10-31 11:27:12 +03:00
"mailcheck": "1.1.1",
"mkdirp": "0.5.1",
"mocha": "4.0.1",
2018-11-10 00:19:13 +03:00
"morgan": "1.9.1",
"mozlog": "2.2.0",
"mustache": "2.3.0",
"node-sass": "4.9.2",
2016-04-15 00:21:50 +03:00
"node-uap": "git://github.com/vladikoff/node-uap.git#9cdd16247",
"node-uuid": "1.4.8",
"node-vat": "0.0.9",
"normalize.css": "3.0.1",
feat(server): Set security headers on all HTML pages. (#4750) r=@rfk What is the problem? The 404 page didn't have x-frame-options, content-security-policy, and x-robots-tag headers set. How does this fix it? Set up the frame-guard, csp, and noindex middlewares to set their headers on *every* HTML response. This is done by wrapping existing middlewares that only work with HTML responses in the `onHeaders` middleware. Using the `onHeaders` middleware, check if the content-type is HTML, and if so, call the original middleware to set the header. Why are all those tests updated? I updated the unit tests of frame-guard, csp, and noindex to ignore the onHeaders middleware. Additionally, since we know definitively the response is HTML, the checks to see if the middleware is applicable is no longer needed, except for CSP where no CSP headers are set for unit tests. This allowed me to remove utils.js too. The unit tests for the x-robots-tag is different, why? The test for the x-robots tag was done for all "non-JSON" responses, yet the middleware itself used to check whether the resource was HTML. I went with the middleware's view of the world and moved the x-robots-tag check to be done on every html page. The unit tests also ditch the check for `content-security-policy-rport-only` Good eye. Those tests *should have been failing*. We have not served the report-only header for quite a while, which leads me to believe that the call to csp.isCspRequired was always returning `false`. Instead of relying upon `csp.isCspRequired`, I encode whether CSP is expected within the route declarations. Assume CSP is required for all HTML resources, then add `csp: false` to those that do not. A combined effort of @g-k and @shane-tomlinson
2017-02-24 15:41:49 +03:00
"on-headers": "1.0.1",
"photon-colors": "1.0.3",
"postcss-cli": "6.0.0",
"postcss-loader": "2.1.6",
"raven": "2.6.1",
"raven-js": "git://github.com/vladikoff/raven-js.git#customEndpoint-3.13.0",
"sass-loader": "7.0.3",
"serve-static": "1.13.1",
"speed-trap": "0.0.8",
"time-grunt": "1.4.0",
"ua-parser-js": "git://github.com/vladikoff/ua-parser-js.git#fxa-version",
"uglifyjs-webpack-plugin": "1.2.7",
"underscore": "1.8.3",
"webpack": "4.16.1",
"webpack-cli": "3.1.0",
"webrtc-adapter-test": "0.2.5"
},
"devDependencies": {
"audit-filter": "0.3.0",
"babel-cli": "6.26.0",
"babel-eslint": "8.2.1",
"babel-plugin-dynamic-import-webpack": "1.0.2",
"chai": "1.8.1",
"css": "2.2.3",
"eslint": "4.16.0",
"eslint-plugin-fxa": "git://github.com/mozilla/eslint-plugin-fxa.git#1153ff4bbf7e2c074363253c555fb7f71bac09a1",
"eslint-plugin-sorting": "git://github.com/shane-tomlinson/eslint-plugin-sorting.git#bcacb99d",
"firefox-profile": "1.2.0",
"fxa-conventional-changelog": "1.1.0",
"grunt-ban-word": "0.1.1",
2016-04-13 18:39:37 +03:00
"grunt-bump": "0.7.0",
"grunt-conventional-changelog": "6.1.0",
2016-04-13 18:39:37 +03:00
"grunt-copyright": "0.3.0",
"grunt-htmllint": "0.3.0",
2016-04-13 18:39:37 +03:00
"grunt-jsonlint": "1.0.7",
"grunt-newer": "1.2.0",
"grunt-sass-lint": "0.2.0",
"grunt-todo": "0.5.0",
"htmlparser2": "3.9.0",
2016-04-13 18:39:37 +03:00
"husky": "0.11.4",
"install": "0.12.1",
"intern": "4.3.1",
"leadfoot": "1.7.4",
"npmshrink": "2.0.0",
"otplib": "7.1.0",
2016-04-13 18:39:37 +03:00
"proxyquire": "1.7.4",
"request": "2.88.0",
"request-promise": "4.2.0",
"sinon": "4.5.0",
"webpack-dev-middleware": "3.1.3",
"xmlhttprequest": "git://github.com/zaach/node-XMLHttpRequest.git#onerror",
"yargs": "10.0.3"
2013-12-04 23:55:48 +04:00
},
"engines": {
"node": ">=8",
"npm": ">=6.4.1"
},
"readmeFilename": "README.md"
}