Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix medicmobile #334

Merged
merged 3 commits into from
Aug 3, 2023
Merged

Fix medicmobile #334

merged 3 commits into from
Aug 3, 2023

Conversation

josephjclark
Copy link
Collaborator

This PR bumps the query-string dependency of medicmobile.

Although query-string goes up several major versions, really its just because of keeping track with node versions. Looking over the history I don't think there's anything for us to worry about - we just get better quality and safer query string parsing.

Note: I originally wanted to just bump the affected library encode-uri-component - but adding the override didn't seem to work in my test project 🤔 Looking over the query-string changes I'm sure this is a safe alternative.

This closes #328 and allows us to close the related security advisory.

@mtuchi
Copy link
Collaborator

mtuchi commented Aug 3, 2023

This looks good 👍🏽 @josephjclark

@mtuchi mtuchi merged commit 1463dd7 into main Aug 3, 2023
1 check passed
@mtuchi mtuchi deleted the security-medicmobile branch August 3, 2023 12:39
josephjclark added a commit that referenced this pull request Jun 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

medicmobile: update query-string
2 participants