From 835e9218beef8f0c559da314fac01cb85dacb740 Mon Sep 17 00:00:00 2001 From: Reed Loden Date: Mon, 24 Aug 2015 12:24:56 -0700 Subject: [PATCH] Build: Update grunt-contrib-uglify because of a security issue in uglify Update grunt-contrib-uglify dependency to v0.9.2 in order to avoid a security issue fixed in uglify-js v2.4.24. https://github.com/mishoo/UglifyJS2/issues/751 https://zyan.scripts.mit.edu/blog/backdooring-js/ Closes gh-2556 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index f1d517209..b78f11a13 100644 --- a/package.json +++ b/package.json @@ -32,7 +32,7 @@ "grunt-cli": "0.1.13", "grunt-compare-size": "0.4.0", "grunt-contrib-jshint": "0.11.2", - "grunt-contrib-uglify": "0.9.1", + "grunt-contrib-uglify": "0.9.2", "grunt-contrib-watch": "0.6.1", "grunt-git-authors": "2.0.1", "grunt-jscs": "2.1.0",