search

gruntjs / grunt-contrib-imagemin

Minify PNG, JPG, GIF and SVG images.
https://gruntjs.com
MIT License
1.21k stars 175 forks source link

Security Audit Fixes #392

Closed whyisjake closed 4 years ago

whyisjake commented 4 years ago

As part of a security audit, would like to upstream these changes into grunt-contrib-imagemin.

jsf-clabot commented 4 years ago

CLA assistant check
All committers have signed the CLA.

whyisjake commented 4 years ago

This is a fix for #391

whyisjake commented 4 years ago

WordPress core issue here: https://core.trac.wordpress.org/ticket/49547#comment:4

whyisjake commented 4 years ago

@sindresorhus, @kevva, @XhmikosR, or @vladikoff any ideas on how to get this merged/released?

vladikoff commented 4 years ago

I can take a look...

XhmikosR commented 4 years ago

For what is worth, there's no fix for the latest decompress AFAICT. That being said, this can land since tests pass, and even be more updated later and drop Node < 10 support.

whyisjake commented 4 years ago

Cool, can we get a :shipit: then?