Merge pull request #5992 from BitGo/WIN-5231

fix(sdk-coin-icp): update cbor-x import to use index-no-eval

Author: mohd-kashif

modules/sdk-coin-icp/src/lib/utils.ts

@@ -21,7 +21,7 @@ import {
   CurveType,
 } from './iface';
 import { KeyPair as IcpKeyPair } from './keyPair';
-import { decode, encode } from 'cbor-x'; // The "cbor-x" library is used here because it supports modern features like BigInt. do not replace it with "cbor as "cbor" is not compatible with Rust's serde_cbor when handling big numbers.
+const { encode, decode } = require('cbor-x/index-no-eval'); // The "cbor-x" library is used here because it supports modern features like BigInt. do not replace it with "cbor as "cbor" is not compatible with Rust's serde_cbor when handling big numbers.
 import js_sha256 from 'js-sha256';
 import BigNumber from 'bignumber.js';
 import { secp256k1 } from '@noble/curves/secp256k1';

modules/sdk-coin-icp/test/unit/utils.ts

@@ -1,7 +1,7 @@
 import should from 'should';
 import utils from '../../src/lib/utils';
 import { accounts, IcpTransactionData, blockHashes, TransactionHashes } from '../resources/icp';
-import { encode } from 'cbor-x';
+const { encode } = require('cbor-x/index-no-eval');
 import { randomBytes } from 'crypto';
 
 describe('utils', () => {