Socket
Socket
Sign inDemoInstall

@regru/browser-update

Package Overview
Dependencies
Maintainers
3
Versions
16
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@regru/browser-update - npm Package Compare versions

Comparing version 1.0.14 to 1.0.15

10

changelog.txt
Changes to the notification / detection script
==========
3.3.26 26.11.20
- fix insecure chrome version number (note: this did not lead to false positive notifications), fixes #515
- whitelist basilisk
3.3.25 19.11.20
- ignore embedded browsers: QtWebEngine, Microcoft Teams, Electron (add a special notification later) fixes #509 fixes #511
- Mark chrome vulnerable below version 86.0.0.4240.111 because of an actively used zero-day exploit.
- describe self-hosting on site
3.3.24 3.10.20

@@ -4,0 +14,0 @@ - change order of specifity for custom notification text (1. use text_for_$BROWSER_in_$LANG, 2. fall back to text_for_$BROWSER, 3. fall back to text_in_$LANG, 4. fall back to text, 5. use default text), fixes #325

2

package.json
{
"name": "@regru/browser-update",
"version": "1.0.14",
"version": "1.0.15",
"description": "Remind users to update their browser in an unobtrusive way.",

@@ -5,0 +5,0 @@ "main": "index.js",

@@ -7,6 +7,6 @@ //(c)2019, MIT Style License <browser-update.org/LICENSE.txt>

var s=this;
this.version="3.3.24";
this.vsakt={c:"85",f:81,s:"13.1.2",e:85,i:12,ios:"13.3",samsung:12.0,o:71,e_a:45.07,o_a:59.1,y:"20.9.1",v:3.3,uc:"13.3"};
this.version="3.3.26";
this.vsakt={c:"87.0.4280",f:83,s:"13.1.2",e:86,i:12,ios:"13.3",samsung:12.0,o:71,e_a:45.09,o_a:59.1,y:"20.9.1",v:3.3,uc:"13.3"};
//severely insecure below(!) this version, insecure means remote code execution that is actively being exploited
this.vsinsecure_below = {c:"78.0.3904.87",f:72,s:"11.1.1",e:16,i:11,ios:"12.3",samsung:9.0,o:62,o_a:52,y:"20",v:"2.7",uc:"13.1"};
this.vsinsecure_below = {c:"86.0.4240.111",f:76,s:"11.1.1",e:16,i:11,ios:"12.3",samsung:9.0,o:62,o_a:52,y:"20",v:"2.7",uc:"13.1"};
this.vsdefault = {c:-3,f:-3,s:-1,e:17,i:11,ios:10,samsung:9.9,o:-3,o_a:-3,y:20.4,v:2.6,uc:13.0,a:535};

@@ -20,5 +20,6 @@ this.names={c:"Chrome",f:'Firefox',s:'Safari',e:"Edge",i:'Internet Explorer',ios:"iOS",samsung:"Samsung Internet",o:'Opera',o_a:'Opera', e_a:"Edge", y:"Yandex Browser",v:"Vivaldi",uc:"UC Browser",a:"Android Browser",x:"Other",silk:"Silk"};

ignore("TV","SMART-TV|SmartTV") ||
ignore("niche browser","OculusBrowser|Falkon|Brave|Classic Browser|Dorado|LBBROWSER|Focus|waterfox|Firefox/56.2|Firefox/56.3|Whale|MIDP|k-meleon|sparrow|wii|Chromium|Puffin|Opera Mini|maxthon|maxton|dolfin|dolphin|seamonkey|opera mini|netfront|moblin|maemo|arora|kazehakase|epiphany|konqueror|rekonq|symbian|webos|PaleMoon|QupZilla|Otter|Midori|qutebrowser") ||
ignore("niche browser","OculusBrowser|Falkon|Brave|Classic Browser|Dorado|LBBROWSER|Focus|waterfox|Firefox/56.2|Firefox/56.3|Whale|MIDP|k-meleon|sparrow|wii|Chromium|Puffin|Opera Mini|maxthon|maxton|dolfin|dolphin|seamonkey|opera mini|netfront|moblin|maemo|arora|kazehakase|epiphany|konqueror|rekonq|symbian|webos|PaleMoon|Basilisk|QupZilla|Otter|Midori|qutebrowser") ||
ignore("mobile without upgrade path or landing page","OPR/44.12.2246|cros|kindle|tizen|silk|blackberry|bb10|RIM|PlayBook|meego|nokia|ucweb|ZuneWP7|537.85.10");
// ignore("android(chrome) web view","; wv");
r.embedded=/"QtWebEngine|Teams|Electron/i.test(ua);
r.mobile=(/iphone|ipod|ipad|android|mobile|phone|ios|iemobile/i.test(ua));

@@ -294,2 +295,4 @@ r.discontinued=(/netscape|greenbrowser|camino|flot|fennec|galeon|coolnovo/i.test(ua));

op.hide_reasons.push("is other browser:" + bb.other)
if (bb.embedded!==false)
op.hide_reasons.push("is embedded browser:" + bb.embedded)
if ( bb.esr && !op.notify_esr)// || (bb.is_supported && !op.notify_also_supported))

@@ -296,0 +299,0 @@ op.hide_reasons.push("Extended support (ESR)")

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc