Closed ericelliott closed 9 years ago
This PR updates all dependencies to the latest versions and upgrades to Express 4.
It also DROPS SUPPORT for Node <0.10.x.
There are a number of security issues with the Express 2.x implementation, including vulnerability to the bodyParser() multipart DoS exploit.
bodyParser()
Build failure on .6 and .8 is expected. Update the Travis config to account for the dropped support.
I have merged this changes in to master and bumped to 2.0.0 (since it breaks compatibility) Thanks!
:+1:
This PR updates all dependencies to the latest versions and upgrades to Express 4.
It also DROPS SUPPORT for Node <0.10.x.
There are a number of security issues with the Express 2.x implementation, including vulnerability to the
bodyParser()
multipart DoS exploit.