m/metamask-extension
1
0
Fork 0
mirror of https://github.com/kremalicious/metamask-extension.git synced 2024-11-25 03:20:23 +01:00
Code

Bump SES to fix audit failure (#20434)

Browse Source 
* Bump SES to fix audit failure

* Freeze Symbol
This commit is contained in:
Frederik Bolding 2023-08-14 21:00:34 +02:00 committed by GitHub
parent 712a62ed74
commit e0a6435f62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/scripts/lockdown-more.js
View File

@ -28,7 +28,7 @@ try {
const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis); const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
// These named intrinsics are not automatically hardened by `lockdown` // These named intrinsics are not automatically hardened by `lockdown`
const shouldHardenManually = new Set(['eval', 'Function']); const shouldHardenManually = new Set(['eval', 'Function', 'Symbol']);
const globalProperties = new Set([ const globalProperties = new Set([
// universalPropertyNames is a constant added by lockdown to global scope // universalPropertyNames is a constant added by lockdown to global scope

2
package.json
View File

@ -358,7 +358,7 @@
"redux-thunk": "^2.3.0", "redux-thunk": "^2.3.0",
"remove-trailing-slash": "^0.1.1", "remove-trailing-slash": "^0.1.1",
"reselect": "^3.0.1", "reselect": "^3.0.1",
"ses": "^0.18.4", "ses": "^0.18.7",
"single-call-balance-checker-abi": "^1.0.0", "single-call-balance-checker-abi": "^1.0.0",
"unicode-confusables": "^0.1.1", "unicode-confusables": "^0.1.1",
"uuid": "^8.3.2", "uuid": "^8.3.2",

19
yarn.lock
View File

@ -1864,6 +1864,13 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"@endo/env-options@npm:^0.1.3":
version: 0.1.3
resolution: "@endo/env-options@npm:0.1.3"
checksum: dbaa1c6edf2de712b0af76c991f2ffd29e52a27d3adca2292531dbbf42ef0541c03daa4d7f2de3efb223d0cacf303c82fe88c19d44a0f5535dce9ccbe5f66138
languageName: node
linkType: hard
"@ensdomains/address-encoder@npm:^0.1.7": "@ensdomains/address-encoder@npm:^0.1.7":
version: 0.1.9 version: 0.1.9
resolution: "@ensdomains/address-encoder@npm:0.1.9" resolution: "@ensdomains/address-encoder@npm:0.1.9"
@ -24521,7 +24528,7 @@ __metadata:
selenium-webdriver: "npm:^4.9.0" selenium-webdriver: "npm:^4.9.0"
semver: "npm:^7.5.4" semver: "npm:^7.5.4"
serve-handler: "npm:^6.1.2" serve-handler: "npm:^6.1.2"
ses: "npm:^0.18.4" ses: "npm:^0.18.7"
single-call-balance-checker-abi: "npm:^1.0.0" single-call-balance-checker-abi: "npm:^1.0.0"
sinon: "npm:^9.0.0" sinon: "npm:^9.0.0"
source-map: "npm:^0.7.2" source-map: "npm:^0.7.2"
@ -30935,10 +30942,12 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"ses@npm:^0.18.1, ses@npm:^0.18.4": "ses@npm:^0.18.1, ses@npm:^0.18.7":
version: 0.18.4 version: 0.18.7
resolution: "ses@npm:0.18.4" resolution: "ses@npm:0.18.7"
checksum: 377d2a898816fe2651fe4cff3832f52efb7f0649a9e439b89d0f39f9d15279fb5bb6aadf85759af6768da43e9dbe096d2e39697d66171412c87f3acf09fcbc30 dependencies:
"@endo/env-options": "npm:^0.1.3"
checksum: 601b442426bb8113bb855548878771aacb62f3c4eb3c45ff32f70338320f03eeb23c0d7eb834f5539793fa8ce497f304db50cbd5da51ef3531a4e94d424bb98c
languageName: node languageName: node
linkType: hard linkType: hard