Code

merge security scan resolutions#206

Code

Merged

restjohn merged 23 commits intomasterngageoint/mage-server:masterfrom scansngageoint/mage-server:scansCopy head branch name to clipboardMay 23, 2024

+10,882-32,893

Commits

Commits on May 15, 2024

• [service] security: update file-type dependency for cve https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36313

  restjohn

  committed
  a933618

  Copy full SHA for a933618

Commits on May 16, 2024

• [service] security: CVE-2020-28498 upgrade elliptical via pem2jwk

  restjohn

  committed
  a53d6bf

  Copy full SHA for a53d6bf

• [web-app] change about page links to https

  restjohn

  committed
  bbdb391

  Copy full SHA for bbdb391

Commits on May 17, 2024

• [service] security: use sha-256 for token hash

  restjohn

  committed
  94cbb96

  Copy full SHA for 94cbb96

• [service] log message typo

  restjohn

  committed
  66b9e7f

  Copy full SHA for 66b9e7f

• [service] improve log message

  restjohn

  committed
  f2ef754

  Copy full SHA for f2ef754

• changelog

  restjohn

  committed
  de1d0a9

  Copy full SHA for de1d0a9

• [service] upgrade geopackage dependency for transitive file-type library upgrade

  restjohn

  committed
  29e51a5

  Copy full SHA for 29e51a5

• [web-app] security: remove unused bootstrap vendor source to address cve

  restjohn

  committed
  db403fa

  Copy full SHA for db403fa

Commits on May 22, 2024

• [web-app] add missing properties to mock observations for feed preview

  restjohn

  committed
  b530bc4

  Copy full SHA for b530bc4

• [web-app] properly close directive tags which the latest angular.js 1.8/jquery 3.7.1 requires due to addressing XSS CVEs; white space consistency

  restjohn

  committed
  7ebfaeb

  Copy full SHA for 7ebfaeb

• [web-app] add provider for moment pipe so feed item component can inject it properly

  restjohn

  committed
  99e8d8b

  Copy full SHA for 99e8d8b

Commits on May 23, 2024

• fix express type def discrepancy in service and arcgis plugin

  restjohn

  committed
  8927541

  Copy full SHA for 8927541

• [plugins/arcgis] downgrade package-lock to v1 with npm v6 until angular upgrade

  restjohn

  committed
  377ad50

  Copy full SHA for 377ad50

• [web-app] use promises instead of deprecated success/error callbacks for https requests; remove some instances of $deferred and $q in favor of promises

  restjohn

  committed
  82dca64

  Copy full SHA for 82dca64

• [web-app] typo in route to event from layers page

  restjohn

  committed
  6c800b2

  Copy full SHA for 6c800b2

• [web-app] clean up some map symbology edit component code

  restjohn

  committed
  b9e496e

  Copy full SHA for b9e496e

• [web-app] do not retain old search results for user search when a new search yields no results

  restjohn

  committed
  d289462

  Copy full SHA for d289462

• [web-app] add angular route prefix to match default prefix of angular 1.8 using html5 mode for future upgrade

  restjohn

  committed
  41f447a

  Copy full SHA for 41f447a

• [web-app] upgrade jquery to 3.7.1; add missing @uirouter/core dependency

  restjohn

  committed
  1f476c3

  Copy full SHA for 1f476c3

• changelog

  restjohn

  committed
  5aa61bf

  Copy full SHA for 5aa61bf

• set version to 6.2.12-beta.1

  restjohn

  committed
  c8c061b

  Copy full SHA for c8c061b

• update plugin peer dependencies on core service

  restjohn

  committed
  b858cc1

  Copy full SHA for b858cc1