Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade papaparse to 5.2.0 #2962

Closed
t83714 opened this issue Sep 9, 2020 · 0 comments · Fixed by #2972
Closed

Upgrade papaparse to 5.2.0 #2962

t83714 opened this issue Sep 9, 2020 · 0 comments · Fixed by #2972
Assignees
@t83714
Labels
feature request
Milestone
v0.0.58

Comments

@t83714
Copy link
Contributor

t83714 commented Sep 9, 2020

Is your feature request related to a problem? Please describe.

We revert papaparse to 5.1.0 (see #2941) as it's the only version contains the fix of the loading DGA file issue.
However, any version lower than 5.2.0 are vulnerable to Regular Expression Denial of Service (ReDos).
We need to:

  • Fork papaparse again to make sure our DGA fix is in place and doesn't conflict with the new version
  • Submit a new ticket to official papaparse repo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@t83714 t83714

Labels
feature request
Projects
None yet
Milestone
v0.0.58
Development

Successfully merging a pull request may close this issue.

Issue/2962 Upgrade PapaParse (for ReDos vulnerability) & Fixed HTTP 416 Error magda-io/magda
1 participant
@t83714