tgriesser / checkit

simple, flexible validations for node and the browser
MIT License
223 stars 53 forks source link

Fix redos #94

Open davisjam opened 6 years ago

davisjam commented 6 years ago

Fix the REDOS security vulnerability I disclosed by email.

davisjam commented 6 years ago

Suggest we update Travis to use node v6 or v8, but I can replace 'let/const' with 'var'. Let me know.

rhys-vdw commented 6 years ago

@davisjam Might as well drop the old Node dep. You can adjust the engines here.

davisjam commented 6 years ago

Done. If you merge this, seems like a good time to cut a new major version.