@behance/fine-uploader - npm Package Compare versions

Comparing version 5.1.3-xhr-passthru to 5.1.4-edge-content-type-fix

client/js/s3/s3.xhr.upload.handler.js

@@ -113,6 +113,17 @@ /*globals qq */
 
+                    // BEHANCE: IE edge workaround
+                    // https://github.com/FineUploader/fine-uploader/commit/a060e50d036026ba62331e1261b6632102c4869d
+                    var hasContentType = false;
                     qq.each(headers, function(name, val) {
+                        if (name === "Content-Type") {
+                            hasContentType = true;
+                        }
                         xhr.setRequestHeader(name, val);
                     });
 
+                    // Workaround for IE Edge
+                    if (!hasContentType) {
+                        xhr.setRequestHeader("Content-Type", "");
+                    }
+
                     xhr.send(chunkData.blob);
@@ -119,0 +130,0 @@ }, function() {

package.json

 {
   "name": "@behance/fine-uploader",
   "title": "Fine Uploader",
-  "version": "5.1.3-xhr-passthru",
+  "version": "5.1.4-edge-content-type-fix",
   "description": "Multiple file upload component with progress-bar, drag-and-drop, support for all modern browsers.",
@@ -6,0 +6,0 @@ "main": "./fine-uploader/js/fineuploader.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3093696

increased by80.14%

Number of package files

295

increased by38.5%

Lines of code

55163

increased by90.36%

Worsened metrics

Number of low supply chain risk alerts

16

increased by77.78%

Number of medium supply chain risk alerts

5

increased by150%

No dependency changes