m/metamask-extension
1
0
Fork 0
mirror of https://github.com/kremalicious/metamask-extension.git synced 2024-11-22 18:00:18 +01:00
Code

Bump SES to fix audit failure (#20434)

Browse Source 
* Bump SES to fix audit failure

* Freeze Symbol
This commit is contained in:
Frederik Bolding 2023-08-14 21:00:34 +02:00 committed by Dan Miller
parent 1ab0c9e160
commit e7b113caa2
3 changed files with 20 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/scripts/lockdown-more.js
View File

@ -28,7 +28,7 @@ try {
const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis); const namedIntrinsics = Reflect.ownKeys(new Compartment().globalThis);
// These named intrinsics are not automatically hardened by `lockdown` // These named intrinsics are not automatically hardened by `lockdown`
const shouldHardenManually = new Set(['eval', 'Function']); const shouldHardenManually = new Set(['eval', 'Function', 'Symbol']);
const globalProperties = new Set([ const globalProperties = new Set([
// universalPropertyNames is a constant added by lockdown to global scope // universalPropertyNames is a constant added by lockdown to global scope

2
package.json
View File

@ -351,7 +351,7 @@
"redux-thunk": "^2.3.0", "redux-thunk": "^2.3.0",
"remove-trailing-slash": "^0.1.1", "remove-trailing-slash": "^0.1.1",
"reselect": "^3.0.1", "reselect": "^3.0.1",
"ses": "^0.18.4", "ses": "^0.18.7",
"single-call-balance-checker-abi": "^1.0.0", "single-call-balance-checker-abi": "^1.0.0",
"unicode-confusables": "^0.1.1", "unicode-confusables": "^0.1.1",
"uuid": "^8.3.2", "uuid": "^8.3.2",

20
yarn.lock
View File

@ -1884,6 +1884,13 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"@endo/env-options@npm:^0.1.3":
version: 0.1.3
resolution: "@endo/env-options@npm:0.1.3"
checksum: da8c66865d4d30b0053a00960657dc36f022975a888f0dd6a2f6bb37b9fe731f45a02a2cf263d93b1a40fcb37b25f8ba7076cb8af9e93fd95f496365d9382930
languageName: node
linkType: hard
"@ensdomains/address-encoder@npm:^0.1.7": "@ensdomains/address-encoder@npm:^0.1.7":
version: 0.1.9 version: 0.1.9
resolution: "@ensdomains/address-encoder@npm:0.1.9" resolution: "@ensdomains/address-encoder@npm:0.1.9"
@ -24758,7 +24765,7 @@ __metadata:
selenium-webdriver: ^4.9.0 selenium-webdriver: ^4.9.0
semver: ^7.3.5 semver: ^7.3.5
serve-handler: ^6.1.2 serve-handler: ^6.1.2
ses: ^0.18.4 ses: ^0.18.7
single-call-balance-checker-abi: ^1.0.0 single-call-balance-checker-abi: ^1.0.0
sinon: ^9.0.0 sinon: ^9.0.0
source-map: ^0.7.2 source-map: ^0.7.2
@ -31342,13 +31349,22 @@ __metadata:
languageName: node languageName: node
linkType: hard linkType: hard
"ses@npm:^0.18.1, ses@npm:^0.18.4": "ses@npm:^0.18.1":
version: 0.18.4 version: 0.18.4
resolution: "ses@npm:0.18.4" resolution: "ses@npm:0.18.4"
checksum: 9afd6edcf390a693926ef728ebb5a435994bbb0f915009ad524c6588cf62e2f66f6d4b4b2694f093b2af2e92c003947ad55404750d756ba75ce70c8636a7ba02 checksum: 9afd6edcf390a693926ef728ebb5a435994bbb0f915009ad524c6588cf62e2f66f6d4b4b2694f093b2af2e92c003947ad55404750d756ba75ce70c8636a7ba02
languageName: node languageName: node
linkType: hard linkType: hard
"ses@npm:^0.18.7":
version: 0.18.7
resolution: "ses@npm:0.18.7"
dependencies:
"@endo/env-options": ^0.1.3
checksum: 75ac014771d9bc1f747193c6d0f9e7d2d7700a10311ba8d805d9bc78d4c20d4ef40537f0535b1ea6abf06babf67e70f8bd37b2ad68ad54992a0c5ce842181c87
languageName: node
linkType: hard
"set-blocking@npm:^2.0.0, set-blocking@npm:~2.0.0": "set-blocking@npm:^2.0.0, set-blocking@npm:~2.0.0":
version: 2.0.0 version: 2.0.0
resolution: "set-blocking@npm:2.0.0" resolution: "set-blocking@npm:2.0.0"