Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix uglifyjs-webpack-plugin security vulnerability #301

Merged
merged 1 commit into from
Jan 24, 2020

Conversation

DimalChandrasiri
Copy link
Contributor

@DimalChandrasiri DimalChandrasiri commented Jan 24, 2020

Purpose

Resolve #300
Which causes the npm audit command to list a XSS vulnerability issue.

Goals

Fix XSS Vulnerability in plugin uglifyjs-webpack-plugin

Approach

Since the repository for uglifyjs-webpack-plugin is archived by the developer, the dependency list would not be fixed. Therefore according to a recommendation on StackOverflow will be removing the uglifyjs-webpack-plugin and will introduce a new minification plugin.

There is also a discussion which has happened in the webpack repository itself.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cross-Site Scripting vulnerability in uglifyjs-webpack-plugin plugin
3 participants