axios 1.5.1 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of axios might be problematic. Click here for more details.

@@ -1,4 +1,4 @@
1
- // Axios v1.5.1 Copyright (c) 2023 Matt Zabriskie and contributors
1
+ // Axios v1.6.0 Copyright (c) 2023 Matt Zabriskie and contributors
2
2
  'use strict';
3
3
 
4
4
  function bind(fn, thisArg) {
@@ -2342,8 +2342,8 @@ var xhrAdapter = isXHRAdapterSupported && function (config) {
2342
2342
  // Specifically not if we're in a web worker, or react-native.
2343
2343
  if (platform.isStandardBrowserEnv) {
2344
2344
  // Add xsrf header
2345
- const xsrfValue = (config.withCredentials || isURLSameOrigin(fullPath))
2346
- && config.xsrfCookieName && cookies.read(config.xsrfCookieName);
2345
+ // regarding CVE-2023-45857 config.withCredentials condition was removed temporarily
2346
+ const xsrfValue = isURLSameOrigin(fullPath) && config.xsrfCookieName && cookies.read(config.xsrfCookieName);
2347
2347
 
2348
2348
  if (xsrfValue) {
2349
2349
  requestHeaders.set(config.xsrfHeaderName, xsrfValue);
@@ -2658,7 +2658,7 @@ function mergeConfig(config1, config2) {
2658
2658
  return config;
2659
2659
  }
2660
2660
 
2661
- const VERSION = "1.5.1";
2661
+ const VERSION = "1.6.0";
2662
2662
 
2663
2663
  const validators$1 = {};
2664
2664