From: Reed Loden <reed@reedloden.com>
Date: Mon, 24 Aug 2015 19:24:56 +0000 (-0700)
Subject: Build: Update grunt-contrib-uglify because of a security issue in uglify
X-Git-Tag: 1.12.0~141
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=2da0cca7d364cc8211b10b7fe1868754aba4fca6;p=jquery.git

Build: Update grunt-contrib-uglify because of a security issue in uglify

Update grunt-contrib-uglify dependency to v0.9.2 in order to
avoid a security issue fixed in uglify-js v2.4.24.

https://github.com/mishoo/UglifyJS2/issues/751
https://zyan.scripts.mit.edu/blog/backdooring-js/

(cherry-picked from 835e9218beef8f0c559da314fac01cb85dacb740)

Closes gh-2556
---

diff --git a/package.json b/package.json
index 7cacc6582..bc309d035 100644
--- a/package.json
+++ b/package.json
@@ -32,7 +32,7 @@
     "grunt-cli": "0.1.13",
     "grunt-compare-size": "0.4.0",
     "grunt-contrib-jshint": "0.11.2",
-    "grunt-contrib-uglify": "0.7.0",
+    "grunt-contrib-uglify": "0.9.2",
     "grunt-contrib-watch": "0.6.1",
     "grunt-git-authors": "2.0.1",
     "grunt-jscs": "2.1.0",