Merge pull request #1768 from fozzleberry/bump-http-proxy-1.18.1

http-proxy denial of service vulnerability
BrowserSync · Jul 16, 2020 · 64f87b9 · 64f87b9
2 parents 43dc459 + 0667104
commit 64f87b9
Show file tree

Hide file tree

Showing 2 changed files with 75 additions and 22 deletions.
diff --git a/packages/browser-sync/package-lock.json b/packages/browser-sync/package-lock.json
diff --git a/packages/browser-sync/package.json b/packages/browser-sync/package.json
@@ -18,7 +18,7 @@
     "client/dist"
   ],
   "engines": {
-    "node": ">= 6.0.0"
+    "node": ">= 8.0.0"
   },
   "scripts": {
     "env": "node ./test/env.js",
@@ -46,7 +46,7 @@
     "etag": "^1.8.1",
     "fresh": "^0.5.2",
     "fs-extra": "3.0.1",
-    "http-proxy": "1.15.2",
+    "http-proxy": "^1.18.1",
     "immutable": "^3",
     "localtunnel": "1.9.2",
     "micromatch": "^3.1.10",