Skip to content
This repository was archived by the owner on Dec 14, 2023. It is now read-only.

Commit 06191f3

Browse files
authored
Update Handlebar (#244)
to remove a prototype pollution
1 parent aa5cb2b commit 06191f3

File tree

2 files changed

+34
-3
lines changed

2 files changed

+34
-3
lines changed

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@
2424
"bootstrap": "^3.3.7",
2525
"cp-translations": "1.0.124",
2626
"font-awesome": "^4.7.0",
27-
"handlebars": "^4.0.10",
27+
"handlebars": "^4.1.0",
2828
"js-cookie": "^2.1.4",
2929
"lodash": "^4.17.4",
3030
"moment": "^2.18.1",

yarn.lock

Lines changed: 33 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -409,6 +409,12 @@ async@^2.0.0, async@^2.1.2, async@^2.1.4:
409409
dependencies:
410410
lodash "^4.14.0"
411411

412+
async@^2.5.0:
413+
version "2.6.2"
414+
resolved "https://registry.yarnpkg.com/async/-/async-2.6.2.tgz#18330ea7e6e313887f5d2f2a904bac6fe4dd5381"
415+
dependencies:
416+
lodash "^4.17.11"
417+
412418
async@~0.9.0:
413419
version "0.9.2"
414420
resolved "https://registry.yarnpkg.com/async/-/async-0.9.2.tgz#aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
@@ -1741,6 +1747,10 @@ [email protected]:
17411747
dependencies:
17421748
graceful-readlink ">= 1.0.0"
17431749

1750+
commander@~2.17.1:
1751+
version "2.17.1"
1752+
resolved "https://registry.yarnpkg.com/commander/-/commander-2.17.1.tgz#bd77ab7de6de94205ceacc72f1716d29f20a77bf"
1753+
17441754
17451755
version "1.4.0"
17461756
resolved "https://registry.yarnpkg.com/common-tags/-/common-tags-1.4.0.tgz#1187be4f3d4cf0c0427d43f74eef1f73501614c0"
@@ -3742,7 +3752,7 @@ gzip-size@^3.0.0:
37423752
dependencies:
37433753
duplexer "^0.1.1"
37443754

3745-
handlebars@^4.0.1, handlebars@^4.0.10:
3755+
handlebars@^4.0.1:
37463756
version "4.0.10"
37473757
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.0.10.tgz#3d30c718b09a3d96f23ea4cc1f403c4d3ba9ff4f"
37483758
dependencies:
@@ -3752,6 +3762,16 @@ handlebars@^4.0.1, handlebars@^4.0.10:
37523762
optionalDependencies:
37533763
uglify-js "^2.6"
37543764

3765+
handlebars@^4.1.0:
3766+
version "4.1.0"
3767+
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.1.0.tgz#0d6a6f34ff1f63cecec8423aa4169827bf787c3a"
3768+
dependencies:
3769+
async "^2.5.0"
3770+
optimist "^0.6.1"
3771+
source-map "^0.6.1"
3772+
optionalDependencies:
3773+
uglify-js "^3.1.4"
3774+
37553775
har-schema@^1.0.5:
37563776
version "1.0.5"
37573777
resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-1.0.5.tgz#d263135f43307c02c602afc8fe95970c0151369e"
@@ -5143,7 +5163,7 @@ lodash@4, lodash@^4.0.0, lodash@^4.0.1, lodash@^4.11.2, lodash@^4.14.0, lodash@^
51435163
version "4.17.4"
51445164
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.4.tgz#78203a4d1c328ae1d86dca6460e369b57f4055ae"
51455165

5146-
5166+
[email protected], lodash@^4.17.11:
51475167
version "4.17.11"
51485168
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
51495169

@@ -7474,6 +7494,10 @@ source-map@^0.4.4:
74747494
dependencies:
74757495
amdefine ">=0.0.4"
74767496

7497+
source-map@^0.6.1, source-map@~0.6.1:
7498+
version "0.6.1"
7499+
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
7500+
74777501
source-map@~0.2.0:
74787502
version "0.2.0"
74797503
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.2.0.tgz#dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d"
@@ -8056,6 +8080,13 @@ uglify-js@^2.6, uglify-js@^2.8.27:
80568080
optionalDependencies:
80578081
uglify-to-browserify "~1.0.0"
80588082

8083+
uglify-js@^3.1.4:
8084+
version "3.4.9"
8085+
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.4.9.tgz#af02f180c1207d76432e473ed24a28f4a782bae3"
8086+
dependencies:
8087+
commander "~2.17.1"
8088+
source-map "~0.6.1"
8089+
80598090
uglify-to-browserify@~1.0.0:
80608091
version "1.0.2"
80618092
resolved "https://registry.yarnpkg.com/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz#6e0924d6bda6b5afe349e39a6d632850a0f882b7"

0 commit comments

Comments
 (0)