johnpapa / lite-server

Lightweight node server
MIT License
2.32k stars 269 forks source link

Update reference `browser-sync` #92

Open ocaraveo opened 8 years ago

ocaraveo commented 8 years ago

Update reference browser-sync

Bump dependency browser-sync (to v2.13.0 or higher), to inherit resp-modifier, to inherit minimatch that fixes Regular Expression Denial of Service

The current referenced version of browser-sync (v2.12.3) produces the warning: npm WARN deprecated minimatch@2.0.10: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue

Repro

  1. Create new project that references lite-server v2.2.2
  2. run npm install

    Environment

    • lite-server version: 2.2.2
    • nodejs version: 6.*
    • npm version: 3.*
richterdennis commented 8 years ago

+1

Need browser-sync v2.14.0

There are a few new options (https://www.browsersync.io/docs/options) that woud be nice if I can use it

johnpapa commented 7 years ago

PR ?