search

pillarjs / router

Simple middleware-style router
MIT License
409 stars 102 forks source link

deps: setprototypeof@1.2.0 #81

Closed wesleytodd closed 4 years ago

wesleytodd commented 5 years ago

Doesn't have impact here, but this release includes mitigation for a possible prototype pollution. I will be opening up a series of these on the Express repos.

wesleytodd commented 5 years ago

Also of note, this can be ported directly onto the 2.0 branch. If you give me a LGTM I will go ahead and do the merge and push, if you want to get me publishing things I can go ahead with a publish as well. Maybe including #42 as that is ready.

wesleytodd commented 4 years ago

Sorry! I had left it because I just amended the commit in the 2.0.0-alpha.2 branch, but it makes sense like you said to merge here and rebase that.

dougwilson commented 4 years ago

yea, otherwise we'll just have to end up cherry-picking it backwards instead of merge forwards is the only diff. it's no prob