paypal-checkout - npm Package Compare versions

Comparing version 4.0.342 to 4.0.343

package.json

 {
   "name": "paypal-checkout",
-  "version": "4.0.342",
+  "version": "4.0.343",
   "description": "PayPal Checkout components, for integrating checkout products.",
@@ -5,0 +5,0 @@ "main": "index.js",

src/lib/dom.js

@@ -240,6 +240,10 @@ /* @flow */
 export function redirect(win : CrossDomainWindowType = window, url : string) : ZalgoPromise<void> {
-    return new ZalgoPromise(resolve => {
+    return new ZalgoPromise((resolve, reject) => {
 
         info(`redirect`, { url });
 
+        if (url.toLowerCase().replace(/[^a-z:]+/g, '').match(/^javascript:/)) {
+            return reject(new Error('Invalid redirect URL'));
+        }
+
         setTimeout(() => {
@@ -246,0 +250,0 @@ win.location = url;

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3822136

increased by0.01%

Lines of code

58426

increased by0.01%

Number of medium maintenance alerts

0

decreased by-100%

No dependency changes