Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Audit Fixes #392

Merged
merged 2 commits into from
Mar 31, 2020
Merged

Security Audit Fixes #392

merged 2 commits into from
Mar 31, 2020

Conversation

whyisjake
Copy link
Contributor

As part of a security audit, would like to upstream these changes into grunt-contrib-imagemin.

@jsf-clabot
Copy link

jsf-clabot commented Mar 3, 2020

CLA assistant check
All committers have signed the CLA.

@whyisjake
Copy link
Contributor Author

This is a fix for #391

@whyisjake
Copy link
Contributor Author

WordPress core issue here: https://core.trac.wordpress.org/ticket/49547#comment:4

@whyisjake
Copy link
Contributor Author

@sindresorhus, @kevva, @XhmikosR, or @vladikoff any ideas on how to get this merged/released?

@vladikoff
Copy link
Member

I can take a look...

@XhmikosR
Copy link
Member

For what is worth, there's no fix for the latest decompress AFAICT. That being said, this can land since tests pass, and even be more updated later and drop Node < 10 support.

@whyisjake
Copy link
Contributor Author

Cool, can we get a :shipit: then?

@vladikoff vladikoff merged commit bc556d2 into gruntjs:master Mar 31, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants