fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882
2025-12-06 00:03:28 +00:00 · 2022-04-08 20:10:38 +00:00
2 changed files with 62 additions and 63 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,7 +22,7 @@
        "@bitwarden/jslib-angular": "file:jslib/angular",
        "@bitwarden/jslib-common": "file:jslib/common",
        "bootstrap": "4.6.0",
-        "braintree-web-drop-in": "1.30.1",
+        "braintree-web-drop-in": "^1.33.1",
        "browser-hrtime": "^1.1.8",
        "core-js": "^3.11.0",
        "date-input-polyfill": "^2.14.0",
@@ -667,9 +667,9 @@
      }
    },
    "node_modules/@braintree/browser-detection": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmjs.org/@braintree/browser-detection/-/browser-detection-1.12.0.tgz",
-      "integrity": "sha512-fmZcaXYkXr9b0J+3HwXLQogIYV+xSS6aBG7LGu0OjLkSD/k62EAu2xLGEDFHUu6siH/I7vvGoC0/Ds3f3RnS6g=="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/@braintree/browser-detection/-/browser-detection-1.12.1.tgz",
+      "integrity": "sha512-i/54qrax5o/WbJJhsE/7qqKE594/kGhR+xSu/w13rT7Mlr/uITkWDXzxffcKQ6l6FQxK0IG0EfgT6TJpWgZcUQ=="
    },
    "node_modules/@braintree/class-list": {
      "version": "0.2.0",
@@ -692,10 +692,9 @@
      "integrity": "sha512-tVpr7U6u6bqeQlHreEjYMNtnHX62vLnNWziY2kQLqkWhvusPuY5DfuGEIPpWqsd+V/a1slyTQaxK6HWTlH6A/Q=="
    },
    "node_modules/@braintree/sanitize-url": {
-      "version": "5.0.2",
-      "resolved": "https://registry.npmjs.org/@braintree/sanitize-url/-/sanitize-url-5.0.2.tgz",
-      "integrity": "sha512-NBEJlHWrhQucLhZGHtSxM2loSaNUMajC7KOYJLyfcdW/6goVoff2HoYI3bz8YCDN0wKGbxtUL0gx2dvHpvnWlw==",
-      "deprecated": "Potential XSS vulnerability patched in v6.0.0."
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/@braintree/sanitize-url/-/sanitize-url-6.0.0.tgz",
+      "integrity": "sha512-mgmE7XBYY/21erpzhexk4Cj1cyTQ9LzvnTxtzM17BJ7ERMNE6W72mQRo0I1Ud8eFJ+RVVIcBNhLFZ3GX4XFz5w=="
    },
    "node_modules/@braintree/uuid": {
      "version": "0.1.0",
@@ -2088,40 +2087,40 @@
      }
    },
    "node_modules/braintree-web": {
-      "version": "3.78.2",
-      "resolved": "https://registry.npmjs.org/braintree-web/-/braintree-web-3.78.2.tgz",
-      "integrity": "sha512-aYKlog3j4BBAgUjRq52gn54/6Kp9zR7PalAzfhych/OArNq9xL0kO+OuQM7V0AxkTyoOHZ1qswIQ9MYPRws/ag==",
+      "version": "3.85.3",
+      "resolved": "https://registry.npmjs.org/braintree-web/-/braintree-web-3.85.3.tgz",
+      "integrity": "sha512-slCnjD/YLFDmiOU0vxL7i4uifjRQV5Cw7dSkhRdXiIT+a8iQ7NxtL5FSomv45wuHqgdilZeQ8iB8guIrn6QgwA==",
      "dependencies": {
        "@braintree/asset-loader": "0.4.4",
-        "@braintree/browser-detection": "1.12.0",
+        "@braintree/browser-detection": "1.12.1",
        "@braintree/class-list": "0.2.0",
        "@braintree/event-emitter": "0.4.1",
        "@braintree/extended-promise": "0.4.1",
        "@braintree/iframer": "1.1.0",
-        "@braintree/sanitize-url": "5.0.2",
+        "@braintree/sanitize-url": "6.0.0",
        "@braintree/uuid": "0.1.0",
        "@braintree/wrap-promise": "2.1.0",
        "card-validator": "8.1.1",
        "credit-card-type": "9.1.0",
        "framebus": "5.1.2",
-        "inject-stylesheet": "4.0.0",
-        "promise-polyfill": "8.2.0",
-        "restricted-input": "3.0.3"
+        "inject-stylesheet": "5.0.0",
+        "promise-polyfill": "8.2.3",
+        "restricted-input": "3.0.5"
      }
    },
    "node_modules/braintree-web-drop-in": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/braintree-web-drop-in/-/braintree-web-drop-in-1.30.1.tgz",
-      "integrity": "sha512-W4sbiHZwrK16RWxBe7iYv986N1TlgO+eBdRdukW0qYNakTWSvgNzB9xk8RNpd1RB3Wt6zb64i4ZMU8A/MW+WAQ==",
+      "version": "1.33.1",
+      "resolved": "https://registry.npmjs.org/braintree-web-drop-in/-/braintree-web-drop-in-1.33.1.tgz",
+      "integrity": "sha512-/gVWpFIGATxVBqBCp7ZTg2vPsH5aZXAASiBVWZ8Tqebntmj0F0KlCtxfvq8k2qMSwKBzhDEgmMp2o0hAcsfM6g==",
      "dependencies": {
        "@braintree/asset-loader": "0.4.4",
-        "@braintree/browser-detection": "1.12.0",
+        "@braintree/browser-detection": "1.12.1",
        "@braintree/class-list": "0.2.0",
        "@braintree/event-emitter": "0.4.1",
        "@braintree/uuid": "0.1.0",
        "@braintree/wrap-promise": "2.1.0",
-        "braintree-web": "3.78.2",
-        "promise-polyfill": "8.2.0"
+        "braintree-web": "3.85.3",
+        "promise-polyfill": "8.2.3"
      }
    },
    "node_modules/browser-hrtime": {
@@ -4843,9 +4842,9 @@
      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="
    },
    "node_modules/inject-stylesheet": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/inject-stylesheet/-/inject-stylesheet-4.0.0.tgz",
-      "integrity": "sha512-EULSmN+gdAMR4w9kk57HJ1Lz6Xp+9OGgTbxpNV2QSncG+LWlihH1d/Clm8ui6b+LAqmIVcrtWfwDrMEgDiUpjg=="
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/inject-stylesheet/-/inject-stylesheet-5.0.0.tgz",
+      "integrity": "sha512-GzncrJP8E/pavMQzoO93CXoYCfTttwVm2cX2TyXJdgtVE0cCvWSFCn1/uMsM6ZkEg7LUsOcKuamcLiGWlv2p9A=="
    },
    "node_modules/internal-slot": {
      "version": "1.0.3",
@@ -6963,9 +6962,9 @@
      "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="
    },
    "node_modules/promise-polyfill": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/promise-polyfill/-/promise-polyfill-8.2.0.tgz",
-      "integrity": "sha512-k/TC0mIcPVF6yHhUvwAp7cvL6I2fFV7TzF1DuGPI8mBh4QQazf36xCKEHKTZKRysEoTQoQdKyP25J8MPJp7j5g=="
+      "version": "8.2.3",
+      "resolved": "https://registry.npmjs.org/promise-polyfill/-/promise-polyfill-8.2.3.tgz",
+      "integrity": "sha512-Og0+jCRQetV84U8wVjMNccfGCnMQ9mGs9Hv78QFe+pSDD3gWTpz0y+1QCuxy5d/vBFuZ3iwP2eycAkvqIMPmWg=="
    },
    "node_modules/proxy-addr": {
      "version": "2.0.7",
@@ -7281,11 +7280,11 @@
      }
    },
    "node_modules/restricted-input": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/restricted-input/-/restricted-input-3.0.3.tgz",
-      "integrity": "sha512-n+h80svtx0yHd6kr7b1nGJ87MSJKiX2lRD9BOOzgC7dzx+57qymdbEnZjdbv5po+4iW5nsKZx984mliALLv2eQ==",
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/restricted-input/-/restricted-input-3.0.5.tgz",
+      "integrity": "sha512-lUuXZ3wUnHURRarj5/0C8vomWIfWJO+p7T6RYwB46v7Oyuyr3yyupU+i7SjqUv4S6RAeAAZt1C/QCLJ9xhQBow==",
      "dependencies": {
-        "@braintree/browser-detection": "^1.10.0"
+        "@braintree/browser-detection": "^1.12.1"
      }
    },
    "node_modules/retry": {
@@ -9668,9 +9667,9 @@
      }
    },
    "@braintree/browser-detection": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmjs.org/@braintree/browser-detection/-/browser-detection-1.12.0.tgz",
-      "integrity": "sha512-fmZcaXYkXr9b0J+3HwXLQogIYV+xSS6aBG7LGu0OjLkSD/k62EAu2xLGEDFHUu6siH/I7vvGoC0/Ds3f3RnS6g=="
+      "version": "1.12.1",
+      "resolved": "https://registry.npmjs.org/@braintree/browser-detection/-/browser-detection-1.12.1.tgz",
+      "integrity": "sha512-i/54qrax5o/WbJJhsE/7qqKE594/kGhR+xSu/w13rT7Mlr/uITkWDXzxffcKQ6l6FQxK0IG0EfgT6TJpWgZcUQ=="
    },
    "@braintree/class-list": {
      "version": "0.2.0",
@@ -9693,9 +9692,9 @@
      "integrity": "sha512-tVpr7U6u6bqeQlHreEjYMNtnHX62vLnNWziY2kQLqkWhvusPuY5DfuGEIPpWqsd+V/a1slyTQaxK6HWTlH6A/Q=="
    },
    "@braintree/sanitize-url": {
-      "version": "5.0.2",
-      "resolved": "https://registry.npmjs.org/@braintree/sanitize-url/-/sanitize-url-5.0.2.tgz",
-      "integrity": "sha512-NBEJlHWrhQucLhZGHtSxM2loSaNUMajC7KOYJLyfcdW/6goVoff2HoYI3bz8YCDN0wKGbxtUL0gx2dvHpvnWlw=="
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/@braintree/sanitize-url/-/sanitize-url-6.0.0.tgz",
+      "integrity": "sha512-mgmE7XBYY/21erpzhexk4Cj1cyTQ9LzvnTxtzM17BJ7ERMNE6W72mQRo0I1Ud8eFJ+RVVIcBNhLFZ3GX4XFz5w=="
    },
    "@braintree/uuid": {
      "version": "0.1.0",
@@ -10804,40 +10803,40 @@
      }
    },
    "braintree-web": {
-      "version": "3.78.2",
-      "resolved": "https://registry.npmjs.org/braintree-web/-/braintree-web-3.78.2.tgz",
-      "integrity": "sha512-aYKlog3j4BBAgUjRq52gn54/6Kp9zR7PalAzfhych/OArNq9xL0kO+OuQM7V0AxkTyoOHZ1qswIQ9MYPRws/ag==",
+      "version": "3.85.3",
+      "resolved": "https://registry.npmjs.org/braintree-web/-/braintree-web-3.85.3.tgz",
+      "integrity": "sha512-slCnjD/YLFDmiOU0vxL7i4uifjRQV5Cw7dSkhRdXiIT+a8iQ7NxtL5FSomv45wuHqgdilZeQ8iB8guIrn6QgwA==",
      "requires": {
        "@braintree/asset-loader": "0.4.4",
-        "@braintree/browser-detection": "1.12.0",
+        "@braintree/browser-detection": "1.12.1",
        "@braintree/class-list": "0.2.0",
        "@braintree/event-emitter": "0.4.1",
        "@braintree/extended-promise": "0.4.1",
        "@braintree/iframer": "1.1.0",
-        "@braintree/sanitize-url": "5.0.2",
+        "@braintree/sanitize-url": "6.0.0",
        "@braintree/uuid": "0.1.0",
        "@braintree/wrap-promise": "2.1.0",
        "card-validator": "8.1.1",
        "credit-card-type": "9.1.0",
        "framebus": "5.1.2",
-        "inject-stylesheet": "4.0.0",
-        "promise-polyfill": "8.2.0",
-        "restricted-input": "3.0.3"
+        "inject-stylesheet": "5.0.0",
+        "promise-polyfill": "8.2.3",
+        "restricted-input": "3.0.5"
      }
    },
    "braintree-web-drop-in": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/braintree-web-drop-in/-/braintree-web-drop-in-1.30.1.tgz",
-      "integrity": "sha512-W4sbiHZwrK16RWxBe7iYv986N1TlgO+eBdRdukW0qYNakTWSvgNzB9xk8RNpd1RB3Wt6zb64i4ZMU8A/MW+WAQ==",
+      "version": "1.33.1",
+      "resolved": "https://registry.npmjs.org/braintree-web-drop-in/-/braintree-web-drop-in-1.33.1.tgz",
+      "integrity": "sha512-/gVWpFIGATxVBqBCp7ZTg2vPsH5aZXAASiBVWZ8Tqebntmj0F0KlCtxfvq8k2qMSwKBzhDEgmMp2o0hAcsfM6g==",
      "requires": {
        "@braintree/asset-loader": "0.4.4",
-        "@braintree/browser-detection": "1.12.0",
+        "@braintree/browser-detection": "1.12.1",
        "@braintree/class-list": "0.2.0",
        "@braintree/event-emitter": "0.4.1",
        "@braintree/uuid": "0.1.0",
        "@braintree/wrap-promise": "2.1.0",
-        "braintree-web": "3.78.2",
-        "promise-polyfill": "8.2.0"
+        "braintree-web": "3.85.3",
+        "promise-polyfill": "8.2.3"
      }
    },
    "browser-hrtime": {
@@ -12865,9 +12864,9 @@
      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ=="
    },
    "inject-stylesheet": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/inject-stylesheet/-/inject-stylesheet-4.0.0.tgz",
-      "integrity": "sha512-EULSmN+gdAMR4w9kk57HJ1Lz6Xp+9OGgTbxpNV2QSncG+LWlihH1d/Clm8ui6b+LAqmIVcrtWfwDrMEgDiUpjg=="
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/inject-stylesheet/-/inject-stylesheet-5.0.0.tgz",
+      "integrity": "sha512-GzncrJP8E/pavMQzoO93CXoYCfTttwVm2cX2TyXJdgtVE0cCvWSFCn1/uMsM6ZkEg7LUsOcKuamcLiGWlv2p9A=="
    },
    "internal-slot": {
      "version": "1.0.3",
@@ -14376,9 +14375,9 @@
      "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="
    },
    "promise-polyfill": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/promise-polyfill/-/promise-polyfill-8.2.0.tgz",
-      "integrity": "sha512-k/TC0mIcPVF6yHhUvwAp7cvL6I2fFV7TzF1DuGPI8mBh4QQazf36xCKEHKTZKRysEoTQoQdKyP25J8MPJp7j5g=="
+      "version": "8.2.3",
+      "resolved": "https://registry.npmjs.org/promise-polyfill/-/promise-polyfill-8.2.3.tgz",
+      "integrity": "sha512-Og0+jCRQetV84U8wVjMNccfGCnMQ9mGs9Hv78QFe+pSDD3gWTpz0y+1QCuxy5d/vBFuZ3iwP2eycAkvqIMPmWg=="
    },
    "proxy-addr": {
      "version": "2.0.7",
@@ -14611,11 +14610,11 @@
      }
    },
    "restricted-input": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/restricted-input/-/restricted-input-3.0.3.tgz",
-      "integrity": "sha512-n+h80svtx0yHd6kr7b1nGJ87MSJKiX2lRD9BOOzgC7dzx+57qymdbEnZjdbv5po+4iW5nsKZx984mliALLv2eQ==",
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/restricted-input/-/restricted-input-3.0.5.tgz",
+      "integrity": "sha512-lUuXZ3wUnHURRarj5/0C8vomWIfWJO+p7T6RYwB46v7Oyuyr3yyupU+i7SjqUv4S6RAeAAZt1C/QCLJ9xhQBow==",
      "requires": {
-        "@braintree/browser-detection": "^1.10.0"
+        "@braintree/browser-detection": "^1.12.1"
      }
    },
    "retry": {
--- a/package.json
+++ b/package.json
@@ -90,7 +90,7 @@
    "@bitwarden/jslib-angular": "file:jslib/angular",
    "@bitwarden/jslib-common": "file:jslib/common",
    "bootstrap": "4.6.0",
-    "braintree-web-drop-in": "1.30.1",
+    "braintree-web-drop-in": "1.33.1",
    "browser-hrtime": "^1.1.8",
    "core-js": "^3.11.0",
    "date-input-polyfill": "^2.14.0",