Merge pull request #2857 from bcgov/feature/FLA-1576-vulnerabilities

fix frontend vulnerability

Author: jianmingtu

src/frontend/efiling-demo/package.json

@@ -60,7 +60,8 @@
     "ws": "^8.17.1",
     "rollup": "^2.79.2",
     "body-parser": "^1.20.3",
-    "path-to-regexp": "^0.1.10"
+    "path-to-regexp": "^0.1.10",
+    "http-proxy-middleware": "^2.0.7"
   },
   "eslintConfig": {
     "extends": "react-app"

src/frontend/efiling-demo/yarn.lock

@@ -8122,10 +8122,10 @@ http-proxy-agent@^4.0.1:
     agent-base "6"
     debug "4"
 
-http-proxy-middleware@^2.0.3:
-  version "2.0.6"
-  resolved "https://registry.yarnpkg.com/http-proxy-middleware/-/http-proxy-middleware-2.0.6.tgz#e1a4dd6979572c7ab5a4e4b55095d1f32a74963f"
-  integrity sha512-ya/UeJ6HVBYxrgYotAZo1KvPWlgB48kUJLDePFeneHsVujFaW5WNj2NgWCAE//B1Dl02BIfYlpNgBy8Kf8Rjmw==
+http-proxy-middleware@^2.0.3, http-proxy-middleware@^2.0.7:
+  version "2.0.7"
+  resolved "https://registry.yarnpkg.com/http-proxy-middleware/-/http-proxy-middleware-2.0.7.tgz#915f236d92ae98ef48278a95dedf17e991936ec6"
+  integrity sha512-fgVY8AV7qU7z/MmXJ/rxwbrtQH4jBQ9m7kp3llF0liB7glmFeVZFBepQb32T3y8n8k2+AEYuMPCpinYW+/CuRA==
   dependencies:
     "@types/http-proxy" "^1.17.8"
     http-proxy "^1.18.1"

src/frontend/efiling-frontend/package.json

@@ -64,24 +64,6 @@
     "coverage": "jest --coverage --env='jsdom'",
     "precommit": "pretty-quick --staged"
   },
-  "resolutions": {
-    "immer": "9.0.6",
-    "trim": "0.0.3",
-    "glob-parent": "5.1.2",
-    "loader-utils": "^2.0.4",
-    "nth-check": "^2.0.1",
-    "terser": "^5.14.2",
-    "json5": "^2.2.2",
-    "minimatch": "^3.0.5",
-    "webpack": "^5.76.0",
-    "braces": "^3.0.3",
-    "webpack-dev-middleware": "^5.3.4",
-    "browserify-sign": "4.2.2",
-    "ws": "^8.17.1",
-    "rollup": "^2.79.2",
-    "body-parser": "^1.20.3",
-    "path-to-regexp": "^0.1.10"
-  },
   "eslintConfig": {
     "extends": "react-app"
   },
@@ -148,7 +130,11 @@
     "braces": "^3.0.3",
     "webpack-dev-middleware": "^5.3.4",
     "browserify-sign": "4.2.2",
-    "ws": "^8.17.1"
+    "ws": "^8.17.1",
+    "rollup": "^2.79.2",
+    "body-parser": "^1.20.3",
+    "path-to-regexp": "^0.1.10",
+    "http-proxy-middleware": "^2.0.7"
   },
   "jest": {
     "watchPathIgnorePatterns": [