axios 1.5.1 → 1.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of axios might be problematic. Click here for more details.

package/dist/esm/axios.js CHANGED
@@ -1,4 +1,4 @@
1
- // Axios v1.5.1 Copyright (c) 2023 Matt Zabriskie and contributors
1
+ // Axios v1.6.0 Copyright (c) 2023 Matt Zabriskie and contributors
2
2
  function bind(fn, thisArg) {
3
3
  return function wrap() {
4
4
  return fn.apply(thisArg, arguments);
@@ -2340,8 +2340,8 @@ const xhrAdapter = isXHRAdapterSupported && function (config) {
2340
2340
  // Specifically not if we're in a web worker, or react-native.
2341
2341
  if (platform.isStandardBrowserEnv) {
2342
2342
  // Add xsrf header
2343
- const xsrfValue = (config.withCredentials || isURLSameOrigin(fullPath))
2344
- && config.xsrfCookieName && cookies.read(config.xsrfCookieName);
2343
+ // regarding CVE-2023-45857 config.withCredentials condition was removed temporarily
2344
+ const xsrfValue = isURLSameOrigin(fullPath) && config.xsrfCookieName && cookies.read(config.xsrfCookieName);
2345
2345
 
2346
2346
  if (xsrfValue) {
2347
2347
  requestHeaders.set(config.xsrfHeaderName, xsrfValue);
@@ -2656,7 +2656,7 @@ function mergeConfig$1(config1, config2) {
2656
2656
  return config;
2657
2657
  }
2658
2658
 
2659
- const VERSION$1 = "1.5.1";
2659
+ const VERSION$1 = "1.6.0";
2660
2660
 
2661
2661
  const validators$1 = {};
2662
2662