Upgrade uglify-js to 2.4.24
The latest version of uglify-js fixed a vulnerability which allows a specially crafted Javascript file to have altered functionality after minification. Changelog between the versions we are running can be found in the Readme file from this diff: https://github.com/mishoo/UglifyJS2/compare/v2.4.15...v2.4.24#diff-04c6e90faac2675aa89e2176d2eec7d8 We use the command line without any special arguments so I don't expect any issues.
Showing
| ... | @@ -3,7 +3,7 @@ | ... | @@ -3,7 +3,7 @@ |
| "version": "0.1.0", | "version": "0.1.0", | ||
| "dependencies": { | "dependencies": { | ||
| "coffee-script": "1.6.1", | "coffee-script": "1.6.1", | ||
| "uglify-js": "2.4.15" | "uglify-js": "2.4.24" | ||
| }, | }, | ||
| "devDependencies": { | "devDependencies": { | ||
| "jshint": "^2.7.0" | "jshint": "^2.7.0" | ||
| ... | ... |
Please
register
or
sign in
to comment