8 Commits

Author SHA1 Message Date
dependabot[bot]
d5b12336df
Bump dot-prop from 4.2.0 to 4.2.1
Bumps [dot-prop](https://github.com/sindresorhus/dot-prop) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/sindresorhus/dot-prop/releases)
- [Commits](https://github.com/sindresorhus/dot-prop/compare/v4.2.0...v4.2.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-11-19 16:51:52 +00:00
dependabot[bot]
94d1b25159 Bump lodash from 4.17.15 to 4.17.19
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19)

Signed-off-by: dependabot[bot] <support@github.com>
2020-07-21 10:01:21 +02:00
ed2307cf18 add support for compressed secp256k1 keys encoded with base58btc
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-07-07 17:29:20 +02:00
b4d7daf379 detect XSS attacks using is-html package
The isValidUrl method is using `idna-uts46-hx` to catch malformed domain
names and `is-html` to identify HTML elements in the URL.

Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-06-09 17:03:43 +02:00
dependabot[bot]
ac0e93de2e Bump minimist from 1.2.0 to 1.2.5
Bumps [minimist](https://github.com/substack/minimist) from 1.2.0 to 1.2.5.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.0...1.2.5)

Signed-off-by: dependabot[bot] <support@github.com>
2020-03-18 10:02:53 +01:00
b9001265e7 add support for express route tests
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-26 10:16:51 +01:00
dd429398d4 use utx46 and univeil to avoid phishing
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-26 10:16:51 +01:00
dc4b2a4ff4 switch to using yarn instead of npm
Signed-off-by: Jakub Sokołowski <jakub@status.im>
2020-02-11 16:36:47 +01:00