From 353ce67048317e6aef4ca090445c46b1e13ab670 Mon Sep 17 00:00:00 2001 From: oldjamey Date: Mon, 3 Sep 2018 00:24:50 -0700 Subject: [PATCH] Security fix for ws dependency. This needs to be tested thoroughly before merging. This seems to have gotten rid of 3 high security vulnerabilities by upgrading the ws dependency that karma uses. Please spot check this before committing to master branch. --- package-lock.json | 6 +++--- package.json | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index bb1083366..16c9ab169 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2126,7 +2126,7 @@ "cookie": "0.3.1", "debug": "2.3.3", "engine.io-parser": "1.3.2", - "ws": "1.1.2" + "ws": "^1.1.2" }, "dependencies": { "debug": { @@ -2161,7 +2161,7 @@ "parsejson": "0.0.3", "parseqs": "0.0.5", "parseuri": "0.0.5", - "ws": "1.1.2", + "ws": "^1.1.2", "xmlhttprequest-ssl": "1.5.3", "yeast": "0.1.2" }, @@ -6470,7 +6470,7 @@ "dev": true }, "ws": { - "version": "1.1.2", + "version": "^1.1.2", "resolved": "https://registry.npmjs.org/ws/-/ws-1.1.2.tgz", "integrity": "sha1-iiRPoFJAHgjJiGz0SoUYnh/UBn8=", "dev": true, diff --git a/package.json b/package.json index 157facaf0..250c85bea 100644 --- a/package.json +++ b/package.json @@ -34,7 +34,7 @@ "grunt-newer": "^1.2.0", "grunt-ng-annotate": "^3.0.0", "jasmine": "^2.5.3", - "karma": "^1.4.0", + "karma": "^2.0.5", "karma-cli": "^1.0.1", "karma-jasmine": "^1.1.0", "karma-phantomjs-launcher": "^1.0.2",