From 2da0cca7d364cc8211b10b7fe1868754aba4fca6 Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Mon, 24 Aug 2015 12:24:56 -0700 Subject: [PATCH] Build: Update grunt-contrib-uglify because of a security issue in uglify Update grunt-contrib-uglify dependency to v0.9.2 in order to avoid a security issue fixed in uglify-js v2.4.24. https://github.com/mishoo/UglifyJS2/issues/751 https://zyan.scripts.mit.edu/blog/backdooring-js/ (cherry-picked from 835e9218beef8f0c559da314fac01cb85dacb740) Closes gh-2556 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 7cacc6582..bc309d035 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "grunt-cli": "0.1.13", "grunt-compare-size": "0.4.0", "grunt-contrib-jshint": "0.11.2", - "grunt-contrib-uglify": "0.7.0", + "grunt-contrib-uglify": "0.9.2", "grunt-contrib-watch": "0.6.1", "grunt-git-authors": "2.0.1", "grunt-jscs": "2.1.0", -- 2.39.5