Upgrades socket.io and engine.io - Githubissues

open-duelyst / duelyst

Duelyst is a digital collectible card game and turn-based strategy hybrid, developed by Counterplay Games.

Creative Commons Zero v1.0 Universal

3.66k stars 566 forks source link

Upgrades socket.io and engine.io #286

Closed willroberts closed 1 year ago

willroberts commented 1 year ago

Summary

This resolves a denial-of-service vector in engine.io: https://security.snyk.io/vuln/SNYK-JS-ENGINEIO-5496331

Also added a couple of PostgreSQL docs on backups.

Build changes (docker/, gulp/, scripts/, etc.):

Upgrades socket.io from 4.4.1 to 4.6.1

Testing

Have you have tested your changes in the following scenarios? Feel free to check off scenarios which don't apply.

[x] Starting backend services locally with docker compose up succeeds.
[x] I am able to create a new user and log in locally.
[x] I am able to complete a practice game locally.
[x] I am able to complete a purchase of Orbs, etc.