m/metamask-extension
1
0
Fork 0
mirror of https://github.com/kremalicious/metamask-extension.git synced 2024-12-22 09:23:21 +01:00
Code

Bump SES to fix audit failure (#20434)

Browse Source 
* Bump SES to fix audit failure

* Freeze Symbol
This commit is contained in:
Frederik Bolding 2023-08-14 21:00:34 +02:00 committed by GitHub
parent 712a62ed74
commit e0a6435f62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/scripts/lockdown-more.js
View File

@ -28,7 +28,7 @@ try {
const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
// These named intrinsics are not automatically hardened by `lockdown`
const shouldHardenManually = new Set(['eval', 'Function']);
const shouldHardenManually = new Set(['eval', 'Function', 'Symbol']);
const globalProperties = new Set([
// universalPropertyNames is a constant added by lockdown to global scope

2
package.json
View File

@ -358,7 +358,7 @@
"redux-thunk": "^2.3.0",
"remove-trailing-slash": "^0.1.1",
"reselect": "^3.0.1",
"ses": "^0.18.4",
"ses": "^0.18.7",
"single-call-balance-checker-abi": "^1.0.0",
"unicode-confusables": "^0.1.1",
"uuid": "^8.3.2",

19
yarn.lock
View File

@ -1864,6 +1864,13 @@ __metadata:
languageName: node
linkType: hard
"@endo/env-options@npm:^0.1.3":
version: 0.1.3
resolution: "@endo/env-options@npm:0.1.3"
checksum: dbaa1c6edf2de712b0af76c991f2ffd29e52a27d3adca2292531dbbf42ef0541c03daa4d7f2de3efb223d0cacf303c82fe88c19d44a0f5535dce9ccbe5f66138
languageName: node
linkType: hard
"@ensdomains/address-encoder@npm:^0.1.7":
version: 0.1.9
resolution: "@ensdomains/address-encoder@npm:0.1.9"
@ -24521,7 +24528,7 @@ __metadata:
selenium-webdriver: "npm:^4.9.0"
semver: "npm:^7.5.4"
serve-handler: "npm:^6.1.2"
ses: "npm:^0.18.4"
ses: "npm:^0.18.7"
single-call-balance-checker-abi: "npm:^1.0.0"
sinon: "npm:^9.0.0"
source-map: "npm:^0.7.2"
@ -30935,10 +30942,12 @@ __metadata:
languageName: node
linkType: hard
"ses@npm:^0.18.1, ses@npm:^0.18.4":
version: 0.18.4
resolution: "ses@npm:0.18.4"
checksum: 377d2a898816fe2651fe4cff3832f52efb7f0649a9e439b89d0f39f9d15279fb5bb6aadf85759af6768da43e9dbe096d2e39697d66171412c87f3acf09fcbc30
"ses@npm:^0.18.1, ses@npm:^0.18.7":
version: 0.18.7
resolution: "ses@npm:0.18.7"
dependencies:
"@endo/env-options": "npm:^0.1.3"
checksum: 601b442426bb8113bb855548878771aacb62f3c4eb3c45ff32f70338320f03eeb23c0d7eb834f5539793fa8ce497f304db50cbd5da51ef3531a4e94d424bb98c
languageName: node
linkType: hard