[Snyk] Upgrade axios from 0.18.0 to 0.19.2

[snyk-bot]

Snyk has created this PR to upgrade axios from 0.18.0 to 0.19.2.

✨What is Merge Advice?

We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2020-01-22.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-AXIOS-174505	No Known Exploit

Release notes

Package name: axios

• 0.19.2 - 2020-01-22
  
  • Remove unnecessary XSS check (#2679) (see (#2646) for discussion)
• 0.19.1 - 2020-01-07
  

  Fixes and Functionality:

  • Fixing invalid agent issue (#1904)
  • Fix ignore set withCredentials false (#2582)
  • Delete useless default to hash (#2458)
  • Fix HTTP/HTTPs agents passing to follow-redirect (#1904)
  • Fix ignore set withCredentials false (#2582)
  • Fix CI build failure (#2570)
  • Remove dependency on is-buffer from package.json (#1816)
  • Adding options typings (#2341)
  • Adding Typescript HTTP method definition for LINK and UNLINK. (#2444)
  • Update dist with newest changes, fixes Custom Attributes issue
  • Change syntax to see if build passes (#2488)
  • Update Webpack + deps, remove now unnecessary polyfills (#2410)
  • Fix to prevent XSS, throw an error when the URL contains a JS script (#2464)
  • Add custom timeout error copy in config (#2275)
  • Add error toJSON example (#2466)
  • Fixing Vulnerability A Fortify Scan finds a critical Cross-Site Scrip… (#2451)
  • Fixing subdomain handling on no_proxy (#2442)
  • Make redirection from HTTP to HTTPS work ([#2426](https://github.com/axios/axios/pull/2426] and (#2547)
  • Add toJSON property to AxiosError type (#2427)
  • Fixing socket hang up error on node side for slow response. (#1752)
  • Alternative syntax to send data into the body (#2317)
  • Fixing custom config options (#2207)
  • Fixing set config.method after mergeConfig for Axios.prototype.request (#2383)
  • Axios create url bug (#2290)
  • Do not modify config.url when using a relative baseURL (resolves #1628) (#2391)
  • Add typescript HTTP method definition for LINK and UNLINK (#2444)

  Internal:

  • Revert "Update Webpack + deps, remove now unnecessary polyfills" (#2479)
  • Order of if/else blocks is causing unit tests mocking XHR. (#2201)
  • Add license badge (#2446)
  • Fix travis CI build #2386
  • Fix cancellation error on build master. #2290 #2207 (#2407)

  Documentation:

  • Fixing typo in CHANGELOG.md: s/Functionallity/Functionality (#2639)
  • Fix badge, use master branch (#2538)
  • Fix typo in changelog #2193
  • Document fix (#2514)
  • Update docs with no_proxy change, issue #2484 (#2513)
  • Fixing missing words in docs template (#2259)
  • 🐛Fix request finally documentation in README (#2189)
  • updating spelling and adding link to docs (#2212)
  • docs: minor tweak (#2404)
  • Update response interceptor docs (#2399)
  • Update README.md (#2504)
  • Fix word 'sintaxe' to 'syntax' in README.md (#2432)
  • upadating README: notes on CommonJS autocomplete (#2256)
  • Fix grammar in README.md (#2271)
  • Doc fixes, minor examples cleanup (#2198)
• 0.19.0 - 2019-05-30
  

  Fixes and Functionality:

  • Unzip response body only for statuses != 204 (#1129) - drawski
  • Destroy stream on exceeding maxContentLength (fixes #1098) (#1485) - Gadzhi Gadzhiev
  • Makes Axios error generic to use AxiosResponse (#1738) - Suman Lama
  • Fixing Mocha tests by locking follow-redirects version to 1.5.10 (#1993) - grumblerchester
  • Allow uppercase methods in typings. (#1781) - Ken Powers
  • Fixing .eslintrc without extension (#1789) - Manoel
  • Consistent coding style (#1787) - Ali Servet Donmez
  • Fixing building url with hash mark (#1771) - Anatoly Ryabov
  • This commit fix building url with hash map (fragment identifier) when parameters are present: they must not be added after #, because client cut everything after #
  • Preserve HTTP method when following redirect (#1758) - Rikki Gibson
  • Add getUri signature to TypeScript definition. (#1736) - Alexander Trauzzi
  • Adding isAxiosError flag to errors thrown by axios (#1419) - Ayush Gupta
  • Fix failing SauceLabs tests by updating configuration - Emily Morehouse

  Documentation:

  • Add information about auth parameter to README (#2166) - xlaguna
  • Add DELETE to list of methods that allow data as a config option (#2169) - Daniela Borges Matos de Carvalho
  • Update ECOSYSTEM.md - Add Axios Endpoints (#2176) - Renan
  • Add r2curl in ECOSYSTEM (#2141) - 유용우 / CX
  • Update README.md - Add instructions for installing with yarn (#2036) - Victor Hermes
  • Fixing spacing for README.md (#2066) - Josh McCarty
  • Update README.md. - Change .then to .finally in example code (#2090) - Omar Cai
  • Clarify what values responseType can have in Node (#2121) - Tyler Breisacher
  • docs(ECOSYSTEM): add axios-api-versioning (#2020) - Weffe
  • It seems that responseType: 'blob' doesn't actually work in Node (when I tried using it, response.data was a string, not a Blob, since Node doesn't have Blobs), so this clarifies that this option should only be used in the browser
  • Add issue templates - Emily Morehouse
  • Update README.md. - Add Querystring library note (#1896) - Dmitriy Eroshenko
  • Add react-hooks-axios to Libraries section of ECOSYSTEM.md (#1925) - Cody Chan
  • Clarify in README that default timeout is 0 (no timeout) (#1750) - Ben Standefer
• 0.19.0-beta.1 - 2018-08-09
  Read more
• 0.18.1 - 2019-06-01
  

  Security Fix:

  • Destroy stream on exceeding maxContentLength (fixes #1098) (#1485) - Gadzhi Gadzhiev
• 0.18.0 - 2018-02-19
  Read more

from axios GitHub release notes

Commit messages

Package name: axios

• 2a0ff47 Releasing 0.19.2
• 17cc1d6 Updating changlog for 0.19.2 release
• c7488c7 Remove unnecessary XSS check introduced by #2451 (#2679)
• 351cf29 Fix link formatting in CHANGELOG.md to display PR number in parens as link (#2643)
• 960e1c8 Releasing 0.19.1
• 8a9421d Fixing typo in CHANGELOG.md: s/Functionallity/Functionality (#2639)
• ee47120 If this place is false, it will report an error, so you should delete the useless code. (#2458)
• 03e6f4b Fixing invalid agent issue (#1904)
• dc4bc49 fix: fix ignore set withCredentials false (#2582)
• 13c948e Remove 'includes' API, fix CI build failure (#2574)
• fa6cf01 fixing Travis link (#2540)
• a17c70c Fix CI build failure (#2570)
• 1a32ca0 Remove dependency on is-buffer (#1816)
• 0cc22c2 Fix badge, use master branch (#2538)
• 8414664 Fix XSS logic that matched some valid urls (#2529)
• bbfd5b1 Adding options typings (#2341)
• 55aaebc Document fix (#2514)
• 86d7750 Update docs with no_proxy change, issue #2484 (#2513)
• b0afbed Adding Typescript HTTP method definition for LINK and UNLINK. (#2444)
• fa68fd3 Update README.md (#2504)
• 0979486 Revert "Update Webpack + deps, remove now unnecessary polyfills" (#2479)
• 494d817 Change syntax to see if build passes (#2488)
• 189b34c Update Webpack + deps, remove now unnecessary polyfills (#2410)
• 29da6b2 Fix to prevent XSS, throw an error when the URL contains a JS script (#2464)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs