-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Closed
Labels
Added during SprintAffects: DependenciesRelates to project dependenciesRelates to project dependencies
Milestone
Description
Description
The classlist-polyfill
dependency was causing a DoS vulnerability affecting downstream projects.
Additional information
The following code is being generated in our uswds.js
file and is being flagged by downstream projects as a security vulnerability:
strTrim = String[protoProp].trim || function () {
return this.replace(/^\s+|\s+$/g, "");
},
The same code can be found in the classlist-polyfil repo
Metadata
Metadata
Assignees
Labels
Added during SprintAffects: DependenciesRelates to project dependenciesRelates to project dependencies
Type
Projects
Status
Done