chore(deps): replace express-xml-bodyparser with body-parser-xml
`express-xml-bodyparser` was last updated 8 years ago and currently depends on a version of `xml2js` which contains a vulnerability. This change will swap it out in favor of `body-parser-xml` which is more maintained and depends on a more recent `xml2js` version without the vulnerability. Relates-to: #18083 Signed-off-by: Patrick Jungermann <Patrick.Jungermann@gmail.com>
This commit is contained in:
@@ -36,9 +36,10 @@
|
||||
"@backstage/errors": "workspace:^",
|
||||
"@backstage/integration": "workspace:^",
|
||||
"@types/express": "^4.17.6",
|
||||
"body-parser": "^1.20.0",
|
||||
"body-parser-xml": "^2.0.5",
|
||||
"express": "^4.17.1",
|
||||
"express-promise-router": "^4.1.0",
|
||||
"express-xml-bodyparser": "^0.3.0",
|
||||
"knex": "^2.0.0",
|
||||
"uuid": "^8.3.2",
|
||||
"winston": "^3.2.1",
|
||||
@@ -46,7 +47,7 @@
|
||||
},
|
||||
"devDependencies": {
|
||||
"@backstage/cli": "workspace:^",
|
||||
"@types/express-xml-bodyparser": "^0.3.2",
|
||||
"@types/body-parser-xml": "^2.0.2",
|
||||
"@types/supertest": "^2.0.8",
|
||||
"msw": "^1.0.0",
|
||||
"supertest": "^6.1.6",
|
||||
|
||||
Reference in New Issue
Block a user