Socket
Socket
Sign inDemoInstall

node-notifier

Package Overview
Dependencies
10
Maintainers
1
Versions
73
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 9.0.0 to 9.0.1

16

CHANGELOG.md
# Changelog
### `v9.0.1`
- Fixes potential security issue with non-escaping input parameters for notify-send.
### `v9.0.0`

@@ -14,2 +18,6 @@

### `v8.0.2`
- Fixes potential security issue with non-escaping input parameters for notify-send.
### `v8.0.0`

@@ -53,4 +61,12 @@

### `v5.4.4`
- Fixes potential security issue with non-escaping input parameters for notify-send.
### `v5.4.3`
- Fixes potential security issue with non-escaping input parameters for notify-send.
### `v5.4.3`
- Reverts breaking dependency upgrades from `v5.4.2` as some dependencies has removed Node 6 which is a breaking change.

@@ -57,0 +73,0 @@

8

lib/utils.js

@@ -301,5 +301,5 @@ var shellwords = require('shellwords');

var escapeFn = function (arg) {
var escapeFn = function escapeFn(arg) {
if (isArray(arg)) {
return removeNewLines(arg.join(','));
return removeNewLines(arg.map(escapeFn).join(','));
}

@@ -317,5 +317,3 @@

initial.forEach(function (val) {
if (typeof val === 'string') {
args.push(escapeFn(val));
}
args.push(escapeFn(val));
});

@@ -322,0 +320,0 @@ for (var key in options) {

{
"name": "node-notifier",
"version": "9.0.0",
"version": "9.0.1",
"description": "A Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)",

@@ -5,0 +5,0 @@ "main": "index.js",

@@ -1,2 +0,2 @@

# node-notifier [![NPM version][npm-image]][npm-url] [![Build Status][travis-image]][travis-url]
# node-notifier [![NPM version][npm-image]][npm-url] [![Install size][size-image]][size-url] [![Build Status][travis-image]][travis-url]

@@ -465,4 +465,6 @@ Send cross platform native notifications using Node.js. Notification Center for macOS,

[npm-image]: http://img.shields.io/npm/v/node-notifier.svg?style=flat
[size-url]: https://packagephobia.com/result?p=node-notifier
[size-image]: https://packagephobia.com/badge?p=node-notifier
[npm-downloads]: http://img.shields.io/npm/dm/node-notifier.svg?style=flat
[travis-url]: http://travis-ci.org/mikaelbr/node-notifier
[travis-image]: http://img.shields.io/travis/mikaelbr/node-notifier.svg?style=flat
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc