Open andygrunwald opened 3 years ago
This project has a few Security dependencies, see https://github.com/andygrunwald/things-with-buzzers-jeopardy/security/dependabot Most of them are related to Jade (or sub dependencies). Jade itself is deprecated and has been renamed to pug, see Rename from "Jade" chapter at https://www.npmjs.com/package/pug/v/2.0.0
Rename from "Jade"
By this, a few breaking changes were introduced. See https://github.com/pugjs/pug/issues/2305
Migrate from Jade to pug. By this, we are able to resolve the security issues.
app.set('view engine', 'jade');
app.set('view engine', 'pug');
*.jade
*.pug
#{
I'm willing to work on this and will investigate over the next few weeks.
Great, thanks @dmz38!
This project has a few Security dependencies, see https://github.com/andygrunwald/things-with-buzzers-jeopardy/security/dependabot Most of them are related to Jade (or sub dependencies). Jade itself is deprecated and has been renamed to pug, see
Rename from "Jade"
chapter at https://www.npmjs.com/package/pug/v/2.0.0By this, a few breaking changes were introduced. See https://github.com/pugjs/pug/issues/2305
Goal of this issue
Migrate from Jade to pug. By this, we are able to resolve the security issues.
Things todo:
app.set('view engine', 'jade');
toapp.set('view engine', 'pug');
*.jade
files to*.pug
#{
and inline interpolation