Eliminate high-sev CVEs by using Webpack@5 #800
Conversation
| chunks: ['formatter-settings'] | ||
| }), | ||
| new HtmlWebpackInlineSourcePlugin(), | ||
| new InlineChunkHtmlPlugin(HtmlWebpackPlugin, [/\.(js)$/]), | ||
| new webpack.ProvidePlugin({ |
There was a problem hiding this comment.
In webpack 5 automatic node.js polyfills are removed. Please refer to https://github.com/webpack/changelog-v5#automatic-nodejs-polyfills-removed and https://stackoverflow.com/questions/65018431/webpack-5-uncaught-referenceerror-process-is-not-defined
|
currently the newest version of |
CsCherrYY
force-pushed
the
upgrade-webpack
branch
from
84a3afc to
0c807dc
Compare
Signed-off-by: Yan Zhang <yanzh@microsoft.com>
CsCherrYY
force-pushed
the
upgrade-webpack
branch
from
fe40833 to
8020c08
Compare
| limit: 200000, | ||
| esModule: false | ||
| } | ||
| type: 'asset', |
There was a problem hiding this comment.
Here to remove deprecated url-loader, the corresponding config can be found at https://webpack.js.org/guides/asset-modules/#general-asset-type
There was a problem hiding this comment.
ok, so please play around it with your webviews. If everything is working well, feel free to approve this PR and we can merge it. (I cannot approve it as original author...)
|
Played the classpath configuration page with this PR and it works well. |
This PR is a trial to adopt Webpack@5.
Here I upgrade some libs, to fix all CVEs with
high serverity. BUT, it breaks the webviews, as html-inline plugin is no longer working with Webpack@5.@CsCherrYY FYI.