Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: npm/ssri
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.1.0
Choose a base ref
...
head repository: npm/ssri
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v8.0.0
Choose a head ref
  • 6 commits
  • 15 files changed
  • 2 contributors

Commits on Feb 14, 2020

  1. feat: remove figgy-pudding

    @claudiahdz
    claudiahdz committed Feb 14, 2020
    Configuration menu
    Copy the full SHA
    0e78fd7 View commit details
    Browse the repository at this point in the history

Commits on Feb 17, 2020

  1. fix: IntegrityStream responds to mutating opts object mid-stream 

    This allows us to start a stream, then get the integrity value mid-way
through, and THEN update the options with the expected integrity.
    @isaacs
    isaacs committed Feb 17, 2020
    Configuration menu
    Copy the full SHA
    4a963e5 View commit details
    Browse the repository at this point in the history

  2. chore: consistent project setup 

    - Update devDeps
- Run lint after tests, not before
- Push to github before publishing, not after
- Use GitHub Actions for CI instead of appveyor/travis
- Remove outdated CoC, PR template, etc.

PR-URL: #11
Credit: @claudiahdz
Close: #11
Reviewed-by: @isaacs
    @isaacs
    isaacs committed Feb 17, 2020
    Configuration menu
    Copy the full SHA
    1727a7c View commit details
    Browse the repository at this point in the history

Commits on Feb 18, 2020

  1. fix: throw null when sri is empty or bad 

    BREAKING CHANGE: adds a new error that will be thrown.  Empty SRIs are
no longer considered valid for checking, only when using integrityStream
to calculate the SRI value.

PR-URL: #12
Credit: @claudiahdz
Close: #12
Reviewed-by: @isaacs
    @claudiahdz @isaacs
    claudiahdz authored and isaacs committed Feb 18, 2020
    Configuration menu
    Copy the full SHA
    a6811cb View commit details
    Browse the repository at this point in the history

  2. fix: harden SRI parsing against ../ funny business 

    The actual security fix this relates to is already fixed in cacache, but
defense in depth is a good and valuable thing.

BREAKING CHANGE: SRI values with `../` in the algorithm name now throw
as invalid (which they always probably should have!)
    @isaacs
    isaacs committed Feb 18, 2020
    Configuration menu
    Copy the full SHA
    4062735 View commit details
    Browse the repository at this point in the history

  3. chore(release): 8.0.0

    @isaacs
    isaacs committed Feb 18, 2020
    Configuration menu
    Copy the full SHA
    41b764f View commit details
    Browse the repository at this point in the history
Loading