Skip to content

Update dependency of chrono-node to v2.2.4 or higher due to CVE-2021-23371 #1

@gecko655

Description

@gecko655

chrono-node CVE-2021-23371: https://snyk.io/vuln/SNYK-JS-CHRONONODE-1083228

I would like to update chrono-node to v2.2.4 or higher, due to a vulnerability about a DoS attack issue.

Chrono-node v2 has breaking changes, which is critical for this textlint rule.

For Users

  • Chrono’s default now handles only international English. While in the previous version, it tried to parse with all known languages.
  • The current fully supported languages are en, ja, and fr (de and pt are partially supported). Other languages from v1 (nl and zh) are under development.
    https://github.com/wanasit/chrono#whats-changed-in-the-v2

So, following things have to be done to update chrono-node to v2.x:

  • Change the code to use the chrono-node v2.x correctly with locale support.
  • Drop the support for es (Spanish) that is not supported by chrono-node v2.x.
  • (Possibly) Drop the support for auto language detection and user will have to choose a language in textlintrc file.

(If you find it's not necessary, it's fine to just close this issue.)
(一旦Issueを立てましたが、必要ないようであればそのまま閉じていただいて構いません。)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions