Skip to content

Improve Safety with Generated UIDs
Compare
Choose a tag to compare
@ericf ericf released this 09 Sep 17:12
· 129 commits to main since this release
v1.1.2
e08289e

There are no known exploits in the wild, but this improves the safety of this package.

This release fixes #5 by using generated UIDs and generated RegExps which use those UIDs making the placeholder token pattern used for serializing functions and regular expressions dynamic and unguessable.

Note: v1.1.0 and v1.1.1 have been unpublished from npm and PR #4 has been reverted because it was a hack and caused more problems than good.

Assets 2