chore(deps): replace express-xml-bodyparser with body-parser-xml

`express-xml-bodyparser` was last updated 8 years ago
and currently depends on a version of `xml2js` which
contains a vulnerability.

This change will swap it out in favor of `body-parser-xml`
which is more maintained and depends on a more recent `xml2js`
version without the vulnerability.

Relates-to: #18083
Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
This commit is contained in:
Patrick Jungermann
2023-08-25 19:46:33 +02:00
parent 65c7c64666
commit 91ccb56fb4
4 changed files with 46 additions and 26 deletions
+3 -2
View File
@@ -36,9 +36,10 @@
"@backstage/errors": "workspace:^",
"@backstage/integration": "workspace:^",
"@types/express": "^4.17.6",
"body-parser": "^1.20.0",
"body-parser-xml": "^2.0.5",
"express": "^4.17.1",
"express-promise-router": "^4.1.0",
"express-xml-bodyparser": "^0.3.0",
"knex": "^2.0.0",
"uuid": "^8.3.2",
"winston": "^3.2.1",
@@ -46,7 +47,7 @@
},
"devDependencies": {
"@backstage/cli": "workspace:^",
"@types/express-xml-bodyparser": "^0.3.2",
"@types/body-parser-xml": "^2.0.2",
"@types/supertest": "^2.0.8",
"msw": "^1.0.0",
"supertest": "^6.1.6",