fix: Force async version 3.2.2

force async version 3.2.2 to get fix for Prototype Pollution in async
vaadin · Apr 19, 2022 · 23bd55d · 23bd55d
1 parent 8878410
commit 23bd55d
Show file tree

Hide file tree

Showing 6 changed files with 154 additions and 156 deletions.
diff --git a/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java b/flow-server/src/main/java/com/vaadin/flow/server/frontend/NodeUpdater.java
@@ -420,6 +420,7 @@ Map<String, String> getDefaultDevDependencies() {
         defaults.put("workbox-core", WORKBOX_VERSION);
         defaults.put("workbox-precaching", WORKBOX_VERSION);
         defaults.put("glob", "7.1.6");
+        defaults.put("async", "3.2.2");
 
         return defaults;
     }

diff --git a/flow-tests/test-frontend/test-npm/package-lock.json b/flow-tests/test-frontend/test-npm/package-lock.json