@jupyterlab/services - npm Package Compare versions

Comparing version 7.1.0 to 7.1.1

lib/contents/index.js

@@ -566,3 +566,10 @@ "use strict";
         let url = coreutils_1.URLExt.join(baseUrl, FILES_URL, coreutils_1.URLExt.encodeParts(localPath));
-        const xsrfTokenMatch = document.cookie.match('\\b_xsrf=([^;]*)\\b');
+        let cookie = '';
+        try {
+            cookie = document.cookie;
+        }
+        catch (e) {
+            // e.g. SecurityError in case of CSP Sandbox
+        }
+        const xsrfTokenMatch = cookie.match('\\b_xsrf=([^;]*)\\b');
         if (xsrfTokenMatch) {
@@ -569,0 +576,0 @@ const fullUrl = new URL(url);

lib/serverconnection.js

@@ -198,3 +198,3 @@ "use strict";
         }
-        if (typeof document !== 'undefined' && (document === null || document === void 0 ? void 0 : document.cookie)) {
+        if (typeof document !== 'undefined') {
             const xsrfToken = getCookie('_xsrf');
@@ -225,3 +225,11 @@ if (xsrfToken !== undefined) {
         // From http://www.tornadoweb.org/en/stable/guide/security.html
-        const matches = document.cookie.match('\\b' + name + '=([^;]*)\\b');
+        let cookie = '';
+        try {
+            cookie = document.cookie;
+        }
+        catch (e) {
+            // e.g. SecurityError in case of CSP Sandbox
+            return;
+        }
+        const matches = cookie.match('\\b' + name + '=([^;]*)\\b');
         return matches === null || matches === void 0 ? void 0 : matches[1];
@@ -228,0 +236,0 @@ }

package.json

 {
   "name": "@jupyterlab/services",
-  "version": "7.1.0",
+  "version": "7.1.1",
   "description": "Client APIs for the Jupyter services REST APIs",
@@ -50,6 +50,6 @@ "keywords": [
     "@jupyter/ydoc": "^1.1.1",
-    "@jupyterlab/coreutils": "^6.1.0",
-    "@jupyterlab/nbformat": "^4.1.0",
-    "@jupyterlab/settingregistry": "^4.1.0",
-    "@jupyterlab/statedb": "^4.1.0",
+    "@jupyterlab/coreutils": "^6.1.1",
+    "@jupyterlab/nbformat": "^4.1.1",
+    "@jupyterlab/settingregistry": "^4.1.1",
+    "@jupyterlab/statedb": "^4.1.1",
     "@lumino/coreutils": "^2.1.2",
@@ -63,3 +63,3 @@ "@lumino/disposable": "^2.1.2",
   "devDependencies": {
-    "@jupyterlab/testing": "^4.1.0",
+    "@jupyterlab/testing": "^4.1.1",
     "@types/jest": "^29.2.0",
@@ -66,0 +66,0 @@ "@types/ws": "^8.5.3",

src/contents/index.ts

@@ -1172,3 +1172,9 @@ // Copyright (c) Jupyter Development Team.
     let url = URLExt.join(baseUrl, FILES_URL, URLExt.encodeParts(localPath));
-    const xsrfTokenMatch = document.cookie.match('\\b_xsrf=([^;]*)\\b');
+    let cookie = '';
+    try {
+      cookie = document.cookie;
+    } catch (e) {
+      // e.g. SecurityError in case of CSP Sandbox
+    }
+    const xsrfTokenMatch = cookie.match('\\b_xsrf=([^;]*)\\b');
     if (xsrfTokenMatch) {
@@ -1175,0 +1181,0 @@ const fullUrl = new URL(url);

src/serverconnection.ts

@@ -309,3 +309,3 @@ // Copyright (c) Jupyter Development Team.
     }
-    if (typeof document !== 'undefined' && document?.cookie) {
+    if (typeof document !== 'undefined') {
       const xsrfToken = getCookie('_xsrf');
@@ -338,5 +338,12 @@ if (xsrfToken !== undefined) {
     // From http://www.tornadoweb.org/en/stable/guide/security.html
-    const matches = document.cookie.match('\\b' + name + '=([^;]*)\\b');
+    let cookie = '';
+    try {
+      cookie = document.cookie;
+    } catch (e) {
+      // e.g. SecurityError in case of CSP Sandbox
+      return;
+    }
+    const matches = cookie.match('\\b' + name + '=([^;]*)\\b');
     return matches?.[1];
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1205750

increased by0.06%

Lines of code

27085

increased by0.1%

Dependency changes

• Updated@jupyterlab/coreutils@^6.1.1

• Updated@jupyterlab/nbformat@^4.1.1

• Updated@jupyterlab/settingregistry@^4.1.1

• Updated@jupyterlab/statedb@^4.1.1