parse-community / parse-server-push-adapter

A push notification adapter for Parse Server
https://parseplatform.org
MIT License
85 stars 100 forks source link

fix: Validate push notification payload #217

Closed mtrezza closed 1 year ago

mtrezza commented 1 year ago

Fixes security vulnerability GHSA-mxhg-rvwx-x993.

parse-github-assistant[bot] commented 1 year ago

Thanks for opening this pull request!

codecov[bot] commented 1 year ago

Codecov Report

Patch coverage: 100.00% and no project coverage change.

Comparison is base (346781d) 100.00% compared to head (de99466) 100.00%.

:exclamation: Current head de99466 differs from pull request most recent head b73013b. Consider uploading reports for the commit b73013b to get more accurate results

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #217 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 5 5 Lines 271 277 +6 ========================================= + Hits 271 277 +6 ``` | [Impacted Files](https://app.codecov.io/gh/parse-community/parse-server-push-adapter/pull/217?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=parse-community) | Coverage Δ | | |---|---|---| | [src/APNS.js](https://app.codecov.io/gh/parse-community/parse-server-push-adapter/pull/217?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=parse-community#diff-c3JjL0FQTlMuanM=) | `100.00% <100.00%> (ø)` | | | [src/GCM.js](https://app.codecov.io/gh/parse-community/parse-server-push-adapter/pull/217?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=parse-community#diff-c3JjL0dDTS5qcw==) | `100.00% <100.00%> (ø)` | |

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.

parseplatformorg commented 1 year ago

🎉 This change has been released in version 4.1.3