UrielProd / UrielTest

0 stars 0 forks source link

Update dependency express-fileupload to v1 - autoclosed #28

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
express-fileupload dependencies major 0.0.5 -> 1.1.6

By merging this PR, the issue #13 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 9.8 CVE-2020-7699
Medium Medium 5.3 WS-2019-0314

Release Notes

richardgirges/express-fileupload ### [`v1.1.6`](https://togithub.com/richardgirges/express-fileupload/releases/tag/1.1.6) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v1.1.5...1.1.6) ### Updates - Add debug option and debug logging output for upload process. - Invoke cleanup in case of abortOnLimit=true to delete temporary file when limit reached([#​155](https://togithub.com/richardgirges/express-fileupload/issues/155) ). - if possible, module uses fs.rename instead of copying + deleting to move uploaded files([#​158](https://togithub.com/richardgirges/express-fileupload/issues/158)). - Add busboy unpipe when closing connection. Thanks to [@​shel](https://togithub.com/shel). - uploadTimeout(default is 60000 msec) option. - Add timeout check for data handler, which triggers cleanup of the temp files in case of no data come during time configured in option uploadTimeout. - Fixing vulnerability: middleware checks filename and cut off it if length more then 255 characters. ### [`v1.1.5`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v1.1.5) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v1.1.4...v1.1.5) ### Updates - Add uri decoding for file names see uriDecodeFileNames option in docs. - createParentPath now creates folder recursevly, thanks to [@​closingin](https://togithub.com/closingin) - Add fileSize to Buffer.concat that should increase performance for in memory uploads. ### [`v1.1.4`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v1.1.4) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v1.0.0...v1.1.4) ### Updates - Custom limit handler function. See limitHandler option in docs. - Add description about empty file data when option useTempFiles used. ### [`v1.0.0`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v1.0.0) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/0.4.0...v1.0.0) ### Updates - Update docs to check for empty object [#​100](https://togithub.com/richardgirges/express-fileupload/issues/100) ### Bug Fixes - Pass Options to File Factory [#​98](https://togithub.com/richardgirges/express-fileupload/issues/98) ### [`v0.4.0`](https://togithub.com/richardgirges/express-fileupload/compare/v0.3.0...0.4.0) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.3.0...0.4.0) ### [`v0.3.0`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.3.0) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.2.0...v0.3.0) Fix for [#​50](https://togithub.com/richardgirges/express-fileupload/issues/50) **NOTE:** all versions moving forward will enforce support for Node 6+ ### [`v0.2.0`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.2.0) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.1.4...v0.2.0) ### Breaking Changes - Support for Node.js v6 and above. No longer supporting versions of Node older than 6 - `.mv()` now returns a Promise when `callback` argument is not provided ### New Features - Promise returned in .mv() ([#​42](https://togithub.com/richardgirges/express-fileupload/issues/42)) ([`9bf6e61`](https://togithub.com/richardgirges/express-fileupload/commit/9bf6e6126053c4383f09ac93bf3e1c643bd6ad18)) ### [`v0.1.4`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.1.4) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.1.3...v0.1.4) ### Bugfixes - [#​36](https://togithub.com/richardgirges/express-fileupload/issues/36) Add error handlers for parser errors ([`0713f6f`](https://togithub.com/richardgirges/express-fileupload/commit/0713f6f91691acae18d0968fe64da739d81fd612)) [@​dries](https://togithub.com/dries) ### [`v0.1.3`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.1.3) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.1.2...v0.1.3) ### Bugfixes - [#​21](https://togithub.com/richardgirges/express-fileupload/issues/21) safeFileName: Extensions are unexpectedly stripped out ### New Features - preserveExtension (PR [#​27](https://togithub.com/richardgirges/express-fileupload/issues/27)) ([`8f599b4`](https://togithub.com/richardgirges/express-fileupload/commit/8f599b481a2f3b318683611533980b5b89306f07)) [@​pronein](https://togithub.com/pronein) - fix readme (PR [#​26](https://togithub.com/richardgirges/express-fileupload/issues/26)) ([`63c759a`](https://togithub.com/richardgirges/express-fileupload/commit/63c759a1bee66621ed63e71c83d657f201557fea)) [@​Cactucs](https://togithub.com/Cactucs) ### [`v0.1.2`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.1.2) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.1.1...v0.1.2) ### Bugfixes - [#​16](https://togithub.com/richardgirges/express-fileupload/issues/16) Upload Large file ### New Features - Improve performance for large files (PR [#​22](https://togithub.com/richardgirges/express-fileupload/issues/22)) ([`e23f337`](https://togithub.com/richardgirges/express-fileupload/commit/e23f3376352f87eb6770ea76e293ff5289de8765)) [@​targos](https://togithub.com/targos) ### [`v0.1.1`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.1.1) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.1.0...v0.1.1) ### Breaking Changes ##### Breaking Change 1.) No more urlencoded support As of v0.1.0, there is NO MORE `application/x-www-form-urlencoded` SUPPORT! Moving forward, express-fileupload is considered a "multipart" solution only. If you want to parse `urlencoded` requests, [use body-parser](https://togithub.com/expressjs/body-parser#bodyparserurlencodedoptions). ##### Breaking Change 2.) Support for Node v4.x.x and above now Usage with Node <4 is no longer supported. Use at your own risk. ### Bugfixes - [#​6](https://togithub.com/richardgirges/express-fileupload/issues/6) Crashes when multipart request is empty ([`3d72084`](https://togithub.com/richardgirges/express-fileupload/commit/3d72084a7a447c1a8059ef8dfda89544ead62ac1)) - [#​9](https://togithub.com/richardgirges/express-fileupload/issues/9) & [#​11](https://togithub.com/richardgirges/express-fileupload/issues/11) body-parser interferes with express-fileupload and vice versa ([`92d7ad5`](https://togithub.com/richardgirges/express-fileupload/commit/92d7ad557c7aabb63ef588652c7c7885d8ae9ada)) - [#​19](https://togithub.com/richardgirges/express-fileupload/issues/19) TypeError: callback is not a function ([`df3df26`](https://togithub.com/richardgirges/express-fileupload/commit/df3df26ed2e0fd322a4abef8e89e73a0258b0fa7)) ### New Features - Unit testing and test coverage. Addresses [#​5](https://togithub.com/richardgirges/express-fileupload/issues/5) ([`266c10d`](https://togithub.com/richardgirges/express-fileupload/commit/266c10db6f2ef83971c044063c2e3dbda0b55766)) - Field array parsing (PR [#​20](https://togithub.com/richardgirges/express-fileupload/issues/20)) ### [`v0.1.0`](https://togithub.com/richardgirges/express-fileupload/compare/v0.0.7...v0.1.0) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.0.7...v0.1.0) ### [`v0.0.7`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.0.7) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/v0.0.6...v0.0.7) ### Bugfixes - [#​17](https://togithub.com/richardgirges/express-fileupload/issues/17) multiple input file input doesn't work ([`ec6270d`](https://togithub.com/richardgirges/express-fileupload/commit/ec6270d67fd63da169f223ac4d40897c6a3b03b9)) ### [`v0.0.6`](https://togithub.com/richardgirges/express-fileupload/releases/tag/v0.0.6) [Compare Source](https://togithub.com/richardgirges/express-fileupload/compare/568a1ccac93e376f14489420df46c144562dcbd4...v0.0.6) ### Bugfixes - [#​14](https://togithub.com/richardgirges/express-fileupload/issues/14) empty file input results in file object with empty buffer. [@​r3wt](https://togithub.com/r3wt) ([`10e90ff`](https://togithub.com/richardgirges/express-fileupload/commit/10e90ffdb5491195a896cbcd4e4dbe41a3db800f)) ### New Features - Better documentation. Addresses [#​10](https://togithub.com/richardgirges/express-fileupload/issues/10) ([`eb7f3ab`](https://togithub.com/richardgirges/express-fileupload/commit/eb7f3ab6b7e03010ffb80f74290226ad1c8280b4)) - Better documentation. Addresses [#​12](https://togithub.com/richardgirges/express-fileupload/issues/12) ([`a1090b8`](https://togithub.com/richardgirges/express-fileupload/commit/a1090b8f8f57e31719e5d4fa8a25273565a108e9)) - New option: [safeFileNames](https://togithub.com/richardgirges/express-fileupload#available-options). Addresses [#​13](https://togithub.com/richardgirges/express-fileupload/issues/13) ([`06da130`](https://togithub.com/richardgirges/express-fileupload/commit/06da1302d57ec9abc6595a9b857a7e84f24cd960))