Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BREAKING CHANGE: update busboy to 1.x and node 14.x #48

Merged
merged 4 commits into from
Sep 16, 2022
Merged

Conversation

atian25
Copy link
Collaborator

@atian25 atian25 commented Sep 16, 2022

due to security problem: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24434

  • update busboy from 0.x to 1.x
    • new Busboy({}) -> Busboy({})
    • onFile(fieldname, stream, filename, transferEncoding, mimeType) -> onFile(name, stream, info)
    • onField(fieldname, value, fieldnameTruncated, valueTruncated) -> onField(name, value, info)
    • Changes in v1.0.0 mscdex/busboy#266
  • update Istanbul to c8
  • update Node.js mini version to 14.x

related issue: eggjs/egg#4977

@dead-horse dead-horse self-requested a review September 16, 2022 07:19
@dead-horse
Copy link
Member

LGTM

@dead-horse
Copy link
Member

will realase a major version because only support node 14 now.

@dead-horse dead-horse merged commit d33789a into master Sep 16, 2022
@dead-horse dead-horse deleted the deps branch September 16, 2022 08:15
@dead-horse
Copy link
Member

2.0.0 released

@atian25
Copy link
Collaborator Author

atian25 commented Sep 21, 2022

should be noted: busboy 1.x change the rule of fileSize and fieldSize from <=size to <size

https://github.com/mscdex/busboy/blob/master/lib/types/multipart.js#L476

vs

https://github.com/mscdex/busboy/blob/v0.2.8/lib/types/multipart.js#L198

@fengmk2
Copy link
Member

fengmk2 commented Sep 26, 2022

fengmk2 added a commit to eggjs/egg that referenced this pull request Sep 26, 2022
fengmk2 added a commit to eggjs/egg that referenced this pull request Sep 26, 2022
iblogc pushed a commit to iblogc/egg that referenced this pull request Jan 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants