AngularJS: vulnerability: npm audit fix
https://github.com/advisories/GHSA-89mq-4x47-5v83
"In AngularJS before 1.7.9 the function merge() could be tricked
into adding or modifying properties of Object.prototype using
a __proto__ payload."
Although, don't see how this is a real threat to the webui
fixed anyway.
https://github.com/angular/angular.js/compare/v1.7.8...v1.7.9
The difference between 1.7.8 and 1.7.9 is small.
Discussion in the works to move any from AngularJS
https://lists.ozlabs.org/pipermail/openbmc/2019-November/019431.html
Tested: Built and loaded on a Witherspoon
Change-Id: Ibe2c9671203a76cd8b4dbb8b1dbbaae2a8230138
Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
diff --git a/package.json b/package.json
index 48f4cb1..04c02dc 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
],
"dependencies": {
"@novnc/novnc": "1.1.0",
- "angular": "1.7.8",
+ "angular": "1.7.9",
"angular-animate": "1.7.8",
"angular-clipboard": "1.7.0",
"angular-cookies": "1.7.8",
@@ -50,8 +50,8 @@
"ng-toast": "2.0.0",
"pkg-dir": "4.2.0",
"regenerator-runtime": "0.13.3",
- "xterm": "3.14.5",
- "text-encoding": "0.7.0"
+ "text-encoding": "0.7.0",
+ "xterm": "3.14.5"
},
"peerDependencies": {},
"devDependencies": {