Skip to content

Commit 6a5dce1

Browse files
committed
fix: replace ansi-html with ansi-html-community
This fixes the ReDoS vulnerability CVE-2021-23424
1 parent 5cb545f commit 6a5dce1

File tree

3 files changed

+6
-6
lines changed

3 files changed

+6
-6
lines changed

client-src/default/overlay.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
// The error overlay is inspired (and mostly copied) from Create React App (https://github.com/facebookincubator/create-react-app)
44
// They, in turn, got inspired by webpack-hot-middleware (https://github.com/glenjamin/webpack-hot-middleware).
55

6-
const ansiHTML = require('ansi-html');
6+
const ansiHTML = require('ansi-html-community');
77
const { AllHtmlEntities } = require('html-entities');
88

99
const entities = new AllHtmlEntities();

package-lock.json

Lines changed: 4 additions & 4 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@
3636
"release": "standard-version"
3737
},
3838
"dependencies": {
39-
"ansi-html": "0.0.7",
39+
"ansi-html-community": "^0.0.8",
4040
"bonjour": "^3.5.0",
4141
"chokidar": "^2.1.8",
4242
"compression": "^1.7.4",

0 commit comments

Comments
 (0)