Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update handlebars and remove cookie-parser #52

Merged
merged 1 commit into from
Jan 18, 2018

Conversation

patins
Copy link
Contributor

@patins patins commented Dec 31, 2017

Old handlebars version had a CVE, GitHub was loud. Removing cookie-parser because we don't use cookies.

Old handlebars version had a CVE, GitHub was loud. Removing
cookie-parser because we don't use cookies.
@jlin816 jlin816 merged commit c7721ad into techx:master Jan 18, 2018
@@ -20,7 +19,7 @@
"gulp-sass": "^2.3.2",
"gulp-sourcemaps": "^1.12.0",
"gulp-uglify": "^1.5.4",
"handlebars": "^3.0.3",
"handlebars": "^4.0.11",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we even use handlebars in this project anywhere..?

Copy link
Contributor Author

@patins patins Jan 18, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Initially I tried removing it and thought it worked (the word "handlebars" isn't used anywhere in the source), but it's used by a mailer that doesn't declare it as a dependency :(

prabhanshuguptagit pushed a commit to prabhanshuguptagit/quill that referenced this pull request Jan 23, 2019
Update handlebars and remove cookie-parser
jtviolet pushed a commit to jtviolet/fountain that referenced this pull request Aug 13, 2019
Update handlebars and remove cookie-parser
jtviolet pushed a commit to jtviolet/fountain that referenced this pull request Aug 13, 2019
Update handlebars and remove cookie-parser
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants