From ddb5969c36b1f91876c4bb33c210f41a21cc3935 Mon Sep 17 00:00:00 2001 From: billchurch Date: Wed, 27 Sep 2017 15:54:01 -0400 Subject: [PATCH] update debug/express/basic-auth modules --- ChangeLog.md | 5 +++-- package.json | 6 +++--- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/ChangeLog.md b/ChangeLog.md index 993f330..a7ddbe2 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -1,8 +1,9 @@ # Change Log ## [0.1.3] TBD ### Changed -- Revert to debug@2.6.9 to eliminate ReDoS in %o formatter -- Upgrade Express to 4.15.5 +- Upgrade to debug@3.1 to eliminate ReDoS in %o formatter +- Upgrade Express to 4.15.5 for ReDOS +- Upgrade basic-auth to v2.0 ## [0.1.2] 2017-07-31 ### Added - ssh.readyTimeout option in config.json (time in ms, default 20000, 20sec) diff --git a/package.json b/package.json index 1f6a17f..033c1da 100644 --- a/package.json +++ b/package.json @@ -27,9 +27,9 @@ "url": "https://github.com/billchurch/WebSSH2/issues" }, "dependencies": { - "basic-auth": "^1.1.0", + "basic-auth": "^2.0.0", "colors": "^1.1.2", - "debug": "^2.6.9", + "debug": "^3.1.0", "express": "^4.15.5", "express-session": "^1.15.5", "morgan": "^1.8.2", @@ -64,4 +64,4 @@ "public/src/js/*.js" ] } -} \ No newline at end of file +}