Skip to content

USWDS - Core: Remove classlist-polyfill dependency #6008

@mahoneycm

Description

@mahoneycm

Description

The classlist-polyfill dependency was causing a DoS vulnerability affecting downstream projects.

Additional information

The following code is being generated in our uswds.js file and is being flagged by downstream projects as a security vulnerability:

  strTrim = String[protoProp].trim || function () {
    return this.replace(/^\s+|\s+$/g, "");
  },

The same code can be found in the classlist-polyfil repo

Metadata

Metadata

Assignees

Type

No type

Projects

Status

Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions