Build: Update grunt-contrib-uglify because of a security issue in uglify

Update grunt-contrib-uglify dependency to v0.9.2 in order to
avoid a security issue fixed in uglify-js v2.4.24.

https://github.com/mishoo/UglifyJS2/issues/751
https://zyan.scripts.mit.edu/blog/backdooring-js/

(cherry-picked from 835e9218beef8f0c559da314fac01cb85dacb740)

Closes gh-2556

diff --git a/package.json b/package.json
index 7cacc658253dda4a6664352b23567d35defe245e..bc309d0357760c16d83cad0f44ff5d4233f5dabf 100644 (file)
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "grunt-cli": "0.1.13",
     "grunt-compare-size": "0.4.0",
     "grunt-contrib-jshint": "0.11.2",
-    "grunt-contrib-uglify": "0.7.0",
+    "grunt-contrib-uglify": "0.9.2",
     "grunt-contrib-watch": "0.6.1",
     "grunt-git-authors": "2.0.1",
     "grunt-jscs": "2.1.0",