fullstorydev / fullstory-browser-sdk

Official FullStory SDK for JavaScript, for web browsers
MIT License
55 stars 17 forks source link

updating md5 hash to sha256 hash when checking if snippet file content has changed #27

Closed patrick-fs closed 4 years ago

patrick-fs commented 4 years ago

I'm replacing the md5 hash used to check for differences between the local and remote snippet files with sha256 - per feedback from the FullStory security team.

This PR also includes a patch for a moderate-severity npm audit check

patrick-fs commented 4 years ago

LGTM; though one nit is that the var name is no longer accurate. It's a sha256 hash and no longer md5.

Good catch!