w3c / Mobile-Checker

The Mobile Checker is a tool for Web developers who want to make their Web page or Web app work better on mobile devices.
https://validator.w3.org/mobile-alpha/
MIT License
322 stars 84 forks source link

The Mobile Checker is using a vulnerable version of express #83

Open astorije opened 9 years ago

astorije commented 9 years ago

The package.json file indicates that the required express version is 4.4.1. However, express in versions <3.11 || >=4 <4.5 are deemed insecure as per the Node Security Project.

Best would be to require ^4.12.4 (or whatever the current stable version is) after some testing.