From d246c1df3e2e855f2d89b73a190ef356c51b7062 Mon Sep 17 00:00:00 2001 From: Addison Elliott Date: Tue, 28 Nov 2017 22:42:32 -0600 Subject: [PATCH 1/2] Ignore moment.js vulnerability Fixes issue #4393 temporarily Once this issue is fixed in moment.js, then this exception list can be removed --- .nsprc | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 .nsprc diff --git a/.nsprc b/.nsprc new file mode 100644 index 0000000000..8244fa8516 --- /dev/null +++ b/.nsprc @@ -0,0 +1,7 @@ +{ + "exceptions": [ + // Monitor the issue and remove this exception when it is resolved + // https://github.com/moment/moment/issues/4163 + "https://nodesecurity.io/advisories/532" + ] +} \ No newline at end of file From 932b460d5c08177409b08b2255db0b50d36eb2f9 Mon Sep 17 00:00:00 2001 From: Addison Elliott Date: Tue, 28 Nov 2017 23:37:23 -0600 Subject: [PATCH 2/2] Remove comment from nsprc since this caused the file to be incorrectly read The nsprc file was ignored if comments were present anywhere within it. Although the development page says it supports comments in the file, I received issues. --- .nsprc | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.nsprc b/.nsprc index 8244fa8516..bbb4e422ce 100644 --- a/.nsprc +++ b/.nsprc @@ -1,7 +1,6 @@ { "exceptions": [ - // Monitor the issue and remove this exception when it is resolved - // https://github.com/moment/moment/issues/4163 - "https://nodesecurity.io/advisories/532" + "https://nodesecurity.io/advisories/532" ] -} \ No newline at end of file +} +