fix(base64url): Bump base64url to 3.0

anvilresearch / webcrypto

W3C Web Cryptography API for Node.js

MIT License

82 stars 14 forks source link

Closed dmitrizagidulin closed 6 years ago

dmitrizagidulin commented 6 years ago

Upgrading base64url package to 3.0, to address potential Uninitialized Memory Exposure vuln.

EternalDeiwos commented 6 years ago

I'll be happy to merge this once the conflicts are sorted out.

(while you're at it would you mind bumping @trust/keyto to 0.3.4 as well please)

dmitrizagidulin commented 6 years ago

@EternalDeiwos - done & done (rebased on latest master with fixes, and bumped keyto to 0.3.4).

EternalDeiwos commented 6 years ago

Merged and published as version 0.9.2