Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@forge/csp

Package Overview
Dependencies
Maintainers
0
Versions
172
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@forge/csp - npm Package Compare versions

Comparing version 3.2.2-experimental-1828c63 to 3.2.2-experimental-264fa0f

6

CHANGELOG.md
# @forge/csp
## 3.2.2-experimental-264fa0f
### Patch Changes
- 386c1f1: Bump cheerio from version 0.22 to version 1.0
## 3.2.2

@@ -4,0 +10,0 @@

4

out/csp/csp-processing-service.js

@@ -5,3 +5,3 @@ "use strict";

const tslib_1 = require("tslib");
const cheerio_1 = tslib_1.__importDefault(require("cheerio"));
const cheerio_1 = require("cheerio");
const content_security_policy_parser_1 = tslib_1.__importDefault(require("content-security-policy-parser"));

@@ -32,3 +32,3 @@ const crypto_1 = tslib_1.__importDefault(require("crypto"));

const external = permissions?.external ?? {};
const $ = cheerio_1.default.load(body);
const $ = (0, cheerio_1.load)(body, { xml: { xmlMode: false } });
const { 'script-src': scriptSrc, 'style-src': styleSrc, ...mappedExternalCsp } = this.mapExternalPermissionsToCsp(external);

@@ -35,0 +35,0 @@ return {

{
"name": "@forge/csp",
"version": "3.2.2-experimental-1828c63",
"version": "3.2.2-experimental-264fa0f",
"description": "Contains the CSP configuration for Custom UI resources in Forge",

@@ -14,4 +14,4 @@ "main": "out/index.js",

"devDependencies": {
"@forge/cli-shared": "5.3.0-next.3-experimental-1828c63",
"@forge/manifest": "7.5.1-next.3-experimental-1828c63",
"@forge/cli-shared": "5.4.0-next.1-experimental-264fa0f",
"@forge/manifest": "7.5.4-next.0-experimental-264fa0f",
"@types/jest": "^29.5.12",

@@ -21,5 +21,5 @@ "@types/node": "14.18.63"

"dependencies": {
"cheerio": "^0.22.0",
"cheerio": "^1.0.0",
"content-security-policy-parser": "^0.4.1"
}
}
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc