Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apply the eslint fixes (from Component Governance Checks) #1596

Merged
merged 2 commits into from
Jul 6, 2021

Conversation

MSNev
Copy link
Collaborator

@MSNev MSNev commented Jun 29, 2021

  • Update ts-plugin dependency version

IChannelControls, hasWindow, hasDocument, isReactNative, doPerf, IDiagnosticLogger, INotificationManager, objForEachKey, proxyAssign,
import {
IConfiguration, AppInsightsCore, IAppInsightsCore, LoggingSeverity, _InternalMessageId, ITelemetryItem, ICustomProperties,
IChannelControls, hasWindow, hasDocument, isReactNative, doPerf, IDiagnosticLogger, INotificationManager, objForEachKey, proxyAssign,
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These are just mixed whitespace issues (had spaces and tabs)

@@ -81,7 +81,7 @@ export class LogEntry {
ms = "0" + ms;
}

ms = ms.replace(/(.)(\d{3})+$/g, '$1.$2s')
ms = ms.replace(/(.)(\d{3}){1}$/g, '$1.$2s')
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The regex changes are security related and a little more complicated and the changes are 2 fold

  • Unnecessary escaping (additional \ when not needed), this could allow someone to "fiddle" with the resulting regex (in memory) to change it's behavior
  • When using * and +, depending on the input string unconstrained matching can cause the regex to use excessive memory, cpu or just fail.

@MSNev MSNev force-pushed the MSNev/UpdateDependencies branch 5 times, most recently from ba948f8 to 2f6184b Compare July 1, 2021 01:49
- Update minimum dependency versions to address installation
@MSNev MSNev merged commit 3e1f041 into master Jul 6, 2021
@MSNev MSNev deleted the MSNev/UpdateDependencies branch July 8, 2021 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

6 participants