From 4e66253c232b510683480ec51053cdc3fed1246c Mon Sep 17 00:00:00 2001 From: Feanil Patel Date: Mon, 31 Aug 2015 09:19:46 -0400 Subject: [PATCH] Upgrade uglify-js to 2.4.24 The latest version of uglify-js fixed a vulnerability which allows a specially crafted Javascript file to have altered functionality after minification. Changelog between the versions we are running can be found in the Readme file from this diff: https://github.com/mishoo/UglifyJS2/compare/v2.4.15...v2.4.24#diff-04c6e90faac2675aa89e2176d2eec7d8 We use the command line without any special arguments so I don't expect any issues. --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 6ff4a6c6bb..876b169897 100644 --- a/package.json +++ b/package.json @@ -3,7 +3,7 @@ "version": "0.1.0", "dependencies": { "coffee-script": "1.6.1", - "uglify-js": "2.4.15" + "uglify-js": "2.4.24" }, "devDependencies": { "jshint": "^2.7.0"