@jsreport/jsreport-core 3.7.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +8 -0
  2. package/lib/main/validateEntityName.js +6 -0
  3. package/package.json +2 -2
package/README.md CHANGED
@@ -282,6 +282,14 @@ jsreport.documentStore.collection('templates')
282
282
 
283
283
  ## Changelog
284
284
 
285
+ ### 3.8.1
286
+
287
+ - update vm2 for fix security issue
288
+
289
+ ### 3.8.0
290
+
291
+ - make "config.json" a reserved name for entities
292
+
285
293
  ### 3.7.0
286
294
 
287
295
  - add support for multiple source entities when copying and moving
package/lib/main/validateEntityName.js CHANGED
@@ -58,5 +58,11 @@ module.exports = (name) => {
58
58
  })
59
59
  }
60
60
 
61
+ if (name === 'config.json') {
62
+ throw createError('Entity name "config.json" is reserved and can\'t be used', {
63
+ statusCode: 400
64
+ })
65
+ }
66
+
61
67
  return true
62
68
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@jsreport/jsreport-core",
3
- "version": "3.7.0",
3
+ "version": "3.8.1",
4
4
  "description": "javascript based business reporting",
5
5
  "keywords": [
6
6
  "report",
@@ -71,7 +71,7 @@
71
71
  "triple-beam": "1.3.0",
72
72
  "unset-value": "1.0.0",
73
73
  "uuid": "8.3.2",
74
- "vm2": "3.9.9",
74
+ "vm2": "3.9.11",
75
75
  "winston": "3.8.1",
76
76
  "winston-transport": "4.5.0"
77
77
  },