Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: JSONPath-Plus/JSONPath
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v10.1.0
Choose a base ref
...
head repository: JSONPath-Plus/JSONPath
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v10.2.0
Choose a head ref
  • 4 commits
  • 31 files changed
  • 3 contributors

Commits on Nov 17, 2024

  1. fix(eval): improve security of safe-eval (#233) 

    * block reading properties 'constructor', '__proto__', '__defineGetter__', '__defineSetter__' if they are not owned by the object.
* allow only expected variables in global scope ( removing constructor, __proto__, etc from global scope )
* Remove previous patches to fix security issues. Ensure no breakage by adding unit tests

* chore: remove unnecessary changes and rebuild docs

rebuild docs using `pnpm run license-badges && pnpm run build-docs && pnpm run lint && pnpm run test`, remove unnecessary changes in test/test.safe-eval.js and badges/license-badge-dev.svg
    @80avin
    80avin authored Nov 17, 2024
    Configuration menu
    Copy the full SHA
    73ad72e View commit details
    Browse the repository at this point in the history

  2. build(deps): bump @eslint/plugin-kit from 0.2.0 to 0.2.3 (#234) 

    Bumps [@eslint/plugin-kit](https://github.com/eslint/rewrite) from 0.2.0 to 0.2.3.
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/release-please-config.json)
- [Commits](eslint/rewrite@core-v0.2.0...plugin-kit-v0.2.3)

---
updated-dependencies:
- dependency-name: "@eslint/plugin-kit"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Nov 17, 2024
    Configuration menu
    Copy the full SHA
    0bfda55 View commit details
    Browse the repository at this point in the history

  3. chore: update deps. and devDeps.

    @brettz9
    brettz9 committed Nov 17, 2024
    Configuration menu
    Copy the full SHA
    f0708a4 View commit details
    Browse the repository at this point in the history

  4. chore: bump version

    @brettz9
    brettz9 committed Nov 17, 2024
    Configuration menu
    Copy the full SHA
    8e4acf8 View commit details
    Browse the repository at this point in the history
Loading