terser 4.6.13 → 4.8.1

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## v4.8.1
+
+ - Security fix for RegExps that should not be evaluated (regexp DDOS)
+
+## v4.8.0
+
+ - Support for numeric separators (`million = 1_000_000`) was added.
+ - Assigning properties to a class is now assumed to be pure.
+ - Fixed bug where `yield` wasn't considered a valid property key in generators.
+
+## v4.7.0
+
+ - A bug was fixed where an arrow function would have the wrong size
+ - `arguments` object is now considered safe to retrieve properties from (useful for `length`, or `0`) even when `pure_getters` is not set.
+ - Fixed erroneous `const` declarations without value (which is invalid) in some corner cases when using `collapse_vars`.
+
 ## v4.6.13
 
  - Fixed issue where ES5 object properties were being turned into ES6 object properties due to more lax unicode rules.

package/README.md

@@ -1317,6 +1317,7 @@ To allow for better optimizations, the compiler makes various assumptions:
   `Object.defineProperty()`, `Object.defineProperties()`, `Object.freeze()`,
   `Object.preventExtensions()` or `Object.seal()`).
 - `document.all` is not `== null`
+- Assigning properties to a class doesn't have side effects and does not throw.
 
 ### Build Tools and Adaptors using Terser
 

package/bin/terser

@@ -281,6 +281,7 @@ function run() {
                     result.enclosed = value.block_scope.enclosed;
                 }
                 value.CTOR.PROPS.forEach(function(prop) {
+                    if (prop === "block_scope") return;
                     result[prop] = value[prop];
                 });
                 return result;