Loading
chore(deps): update dependency happy-dom to ^20.0.1
This MR contains the following updates:
| Package | Change | Age | Confidence |
|---|---|---|---|
| happy-dom | ^20.0.0 -> ^20.0.1 |
Release Notes
capricorn86/happy-dom (happy-dom)
v20.0.1
:construction_worker_man: Patch fixes
- Adds warning for environment with unfrozen intrinsics (builtins) when JavaScript evaluation is enabled- By @capricorn86 in task #1932
- A security advisory has been reported showing that the recommended preventive measure of running Node.js with
--disallow-code-generation-from-stringswasn't enough to protect against attackers escaping the VM context and accessing process-level functions. Big thanks to @cristianstaicu for reporting this! - The documentation for how to run Happy DOM with JavaScript evaluation enabled in a safer way has been updated. Read more about it in the Wiki
- A security advisory has been reported showing that the recommended preventive measure of running Node.js with
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.
Edited by Ghost User