strong-error-handler 2.3.0 → 2.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGES.md CHANGED
@@ -1,3 +1,11 @@
1
+ 2018-01-25, Version 2.3.1
2
+ =========================
3
+
4
+ * Escape strings in HTML output (XSS fix) (Zachery Metcalf)
5
+
6
+ * Update LICENSE.md (Diana Lau)
7
+
8
+
1
9
  2017-10-13, Version 2.3.0
2
10
  =========================
3
11
 
package/LICENSE.md CHANGED
@@ -1,4 +1,4 @@
1
- Copyright (c) IBM Corp. 2016. All Rights Reserved.
1
+ Copyright (c) IBM Corp. 2016,2017. All Rights Reserved.
2
2
  Node module: strong-error-handler
3
3
  This project is licensed under the MIT License, full text below.
4
4
 
package/package.json CHANGED
@@ -2,7 +2,7 @@
2
2
  "name": "strong-error-handler",
3
3
  "description": "Error handler for use in development and production environments.",
4
4
  "license": "MIT",
5
- "version": "2.3.0",
5
+ "version": "2.3.1",
6
6
  "engines": {
7
7
  "node": ">=4"
8
8
  },
@@ -19,7 +19,7 @@
19
19
  "dependencies": {
20
20
  "accepts": "^1.3.3",
21
21
  "debug": "^2.2.0",
22
- "ejs": "^2.4.2",
22
+ "ejs": "^2.5.7",
23
23
  "http-status": "^1.0.0",
24
24
  "js2xmlparser": "^3.0.0",
25
25
  "strong-globalize": "^3.1.0"
@@ -1,19 +1,19 @@
1
1
  <html>
2
2
  <head>
3
3
  <meta charset='utf-8'>
4
- <title><%- data.name || data.message %></title>
4
+ <title><%= data.name || data.message %></title>
5
5
  <style><%- include style.css %></style>
6
6
  </head>
7
7
  <body>
8
8
  <div id="wrapper">
9
- <h1><%- data.name %></h1>
10
- <h2><em><%- data.statusCode %></em> <%- data.message %></h2>
9
+ <h1><%= data.name %></h1>
10
+ <h2><em><%= data.statusCode %></em> <%= data.message %></h2>
11
11
  <%
12
12
  // display all the non-standard properties
13
13
  var standardProps = ['name', 'statusCode', 'message', 'stack'];
14
14
  for (var prop in data) {
15
15
  if (standardProps.indexOf(prop) == -1 && data[prop]) { %>
16
- <div><b><%- prop %></b>: <%- data[prop] %></div>
16
+ <div><b><%= prop %></b>: <%= data[prop] %></div>
17
17
  <% }
18
18
  }
19
19
  if (data.stack) { %>