Fix dependabot alert about url-regex library

mediamonks / muban

A backend-agnostic framework to enhance server-rendered HTML using a modern webpack development setup.

https://mediamonks.github.io/muban/

39 stars 15 forks source link

Fix dependabot alert about url-regex library #147

Open skulptur opened 4 years ago

skulptur commented 4 years ago

This one is not a matter of just updating the library since all versions are problematic.

ThaNarie commented 4 years ago

This issue is only relevant on servers (on faulty user input). We use this in our build tools, which shouldn't affected (in the same way) - so this is less of an issue.