@updog/data-editor 0.1.69 → 0.1.71
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +3 -3
- package/README.md +1 -1
- package/SECURITY.md +10 -4
- package/index.js +991 -989
- package/package.json +2 -2
package/LICENSE
CHANGED
|
@@ -146,8 +146,8 @@ from scratch without copying or deriving from the Software.
|
|
|
146
146
|
|
|
147
147
|
The Software may include third-party open source components subject to their
|
|
148
148
|
respective licenses. Such components are not governed by this License. A list
|
|
149
|
-
of third-party components and their applicable licenses is
|
|
150
|
-
|
|
149
|
+
of third-party components and their applicable licenses is included in each
|
|
150
|
+
published package as THIRD_PARTY_NOTICES.txt.
|
|
151
151
|
|
|
152
152
|
--------------------------------------------------------------------------------
|
|
153
153
|
7. COMPLIANCE
|
|
@@ -254,7 +254,7 @@ understandings or agreements relating to the Software.
|
|
|
254
254
|
|
|
255
255
|
--------------------------------------------------------------------------------
|
|
256
256
|
|
|
257
|
-
For licensing inquiries:
|
|
257
|
+
For licensing inquiries: support@updog.tech
|
|
258
258
|
Website: https://updog.tech
|
|
259
259
|
|
|
260
260
|
================================================================================
|
package/README.md
CHANGED
|
@@ -450,4 +450,4 @@ See [@updog/data-editor-wc](https://www.npmjs.com/package/@updog/data-editor-wc)
|
|
|
450
450
|
|
|
451
451
|
## License
|
|
452
452
|
|
|
453
|
-
Commercial — see [LICENSE](./LICENSE) for the full terms of the Updog SDK Commercial License v1.0. Contact `
|
|
453
|
+
Commercial — see [LICENSE](./LICENSE) for the full terms of the Updog SDK Commercial License v1.0. Contact `support@updog.tech` for enterprise licensing. Third-party dependencies are listed in `THIRD_PARTY_NOTICES.txt`.
|
package/SECURITY.md
CHANGED
|
@@ -1,10 +1,14 @@
|
|
|
1
1
|
# Security Policy
|
|
2
2
|
|
|
3
|
+
Our full security policy is published at **https://updog.tech/security/**. That page is the single source of truth. This file summarizes it for readers of the package.
|
|
4
|
+
|
|
3
5
|
## Reporting a Vulnerability
|
|
4
6
|
|
|
5
|
-
Email `
|
|
7
|
+
Email `security@updog.tech` with a description of the issue, steps to reproduce, and any relevant proof-of-concept code.
|
|
8
|
+
|
|
9
|
+
We will acknowledge your report by email within **5 business days** of receiving it. We do not commit to a remediation timeline.
|
|
6
10
|
|
|
7
|
-
Please do not file public issues or post to forums before we have had a
|
|
11
|
+
Please do not file public issues or post to forums before we have had a reasonable opportunity to respond.
|
|
8
12
|
|
|
9
13
|
## Supported Versions
|
|
10
14
|
|
|
@@ -15,10 +19,12 @@ Only the most recent minor version of `@updog/data-editor` and `@updog/data-edit
|
|
|
15
19
|
In scope:
|
|
16
20
|
- Cross-site scripting via data rendered inside the editor grid, cells, dropdowns, or modal chrome.
|
|
17
21
|
- License-validation bypass.
|
|
18
|
-
- Memory corruption in file parsing
|
|
22
|
+
- Memory corruption or unsafe behavior in file parsing, in any supported format: CSV, TSV, JSON, XML, XLSX, XLS, XLSB, ODS.
|
|
19
23
|
- Any vulnerability that lets a user of the host page access data or functionality they should not.
|
|
20
24
|
|
|
21
25
|
Out of scope:
|
|
22
26
|
- Security issues in a host application's own code that embeds the SDK.
|
|
23
27
|
- Denial of service via arbitrarily large user-provided files.
|
|
24
|
-
- Issues requiring a compromised
|
|
28
|
+
- Issues requiring a compromised npm registry, CDN, or customer API key.
|
|
29
|
+
|
|
30
|
+
Our web properties are also in scope, and the safe harbor terms for good-faith research are set out at https://updog.tech/security/.
|