fix: xss vulnerability in mocha (#2469)

dashpay · Feb 18, 2025 · 04276d5 · 04276d5
1 parent ddf4e67
commit 04276d5
Show file tree

Hide file tree

Showing 51 changed files with 410 additions and 518 deletions.
diff --git a/.pnp.cjs b/.pnp.cjs
diff --git a/.yarn/cache/@jridgewell-source-map-npm-0.3.2-6fd1f37b22-1aaa42075b.zip b/.yarn/cache/@jridgewell-source-map-npm-0.3.2-6fd1f37b22-1aaa42075b.zip
diff --git a/.yarn/cache/@ungap-promise-all-settled-npm-1.1.2-c0f42e147b-ee8fe811be.zip b/.yarn/cache/@ungap-promise-all-settled-npm-1.1.2-c0f42e147b-ee8fe811be.zip
diff --git a/.yarn/cache/ansi-colors-npm-4.1.3-8ffd0ae6c7-43d6e2fc7b.zip b/.yarn/cache/ansi-colors-npm-4.1.3-8ffd0ae6c7-43d6e2fc7b.zip
diff --git a/.yarn/cache/chokidar-npm-3.6.0-3c413a828f-c327fb0770.zip b/.yarn/cache/chokidar-npm-3.6.0-3c413a828f-c327fb0770.zip
diff --git a/.yarn/cache/cliui-npm-8.0.1-3b029092cf-eaa5561aeb.zip b/.yarn/cache/cliui-npm-8.0.1-3b029092cf-eaa5561aeb.zip
diff --git a/.yarn/cache/debug-npm-4.3.3-710fd4cc7f-723a9570dc.zip b/.yarn/cache/debug-npm-4.3.3-710fd4cc7f-723a9570dc.zip
diff --git a/.yarn/cache/debug-npm-4.4.0-f6efe76023-1847944c2e.zip b/.yarn/cache/debug-npm-4.4.0-f6efe76023-1847944c2e.zip
diff --git a/.yarn/cache/diff-npm-5.0.0-ad6900db18-4a179a75b1.zip b/.yarn/cache/diff-npm-5.0.0-ad6900db18-4a179a75b1.zip
diff --git a/.yarn/cache/diff-npm-5.2.0-f523a581f3-01b7b440f8.zip b/.yarn/cache/diff-npm-5.2.0-f523a581f3-01b7b440f8.zip
diff --git a/.yarn/cache/glob-npm-7.2.0-bb4644d239-bc78b6ea07.zip b/.yarn/cache/glob-npm-7.2.0-bb4644d239-bc78b6ea07.zip
diff --git a/.yarn/cache/growl-npm-1.10.5-2d1da54198-1391a9add9.zip b/.yarn/cache/growl-npm-1.10.5-2d1da54198-1391a9add9.zip
diff --git a/.yarn/cache/minimatch-npm-4.2.1-558ec7f418-27e49fb720.zip b/.yarn/cache/minimatch-npm-4.2.1-558ec7f418-27e49fb720.zip
diff --git a/.yarn/cache/minimatch-npm-5.0.1-612724f6f0-2656580f18.zip b/.yarn/cache/minimatch-npm-5.0.1-612724f6f0-2656580f18.zip
diff --git a/.yarn/cache/mocha-npm-10.2.0-87db25c7c5-f7362898ae.zip b/.yarn/cache/mocha-npm-10.2.0-87db25c7c5-f7362898ae.zip
diff --git a/.yarn/cache/mocha-npm-11.1.0-7c863baca0-50d1305813.zip b/.yarn/cache/mocha-npm-11.1.0-7c863baca0-50d1305813.zip
diff --git a/.yarn/cache/mocha-npm-9.2.2-f7735febb8-8ee58bff86.zip b/.yarn/cache/mocha-npm-9.2.2-f7735febb8-8ee58bff86.zip
diff --git a/.yarn/cache/nanoid-npm-3.3.8-d22226208b-2d1766606c.zip b/.yarn/cache/nanoid-npm-3.3.8-d22226208b-2d1766606c.zip
diff --git a/.yarn/cache/schema-utils-npm-4.3.0-6f0a75e2e2-86c5a7c72a.zip b/.yarn/cache/schema-utils-npm-4.3.0-6f0a75e2e2-86c5a7c72a.zip
diff --git a/.yarn/cache/serialize-javascript-npm-6.0.0-0bb8a3c88d-ed3dabfbb5.zip b/.yarn/cache/serialize-javascript-npm-6.0.0-0bb8a3c88d-ed3dabfbb5.zip
diff --git a/.yarn/cache/terser-npm-5.14.2-b0f8815852-0646b5db1d.zip b/.yarn/cache/terser-npm-5.14.2-b0f8815852-0646b5db1d.zip
diff --git a/.yarn/cache/terser-npm-5.39.0-127c67156d-d84aff6423.zip b/.yarn/cache/terser-npm-5.39.0-127c67156d-d84aff6423.zip
diff --git a/.yarn/cache/terser-webpack-plugin-npm-5.3.11-1a5bba0883-a8f7c92c75.zip b/.yarn/cache/terser-webpack-plugin-npm-5.3.11-1a5bba0883-a8f7c92c75.zip
diff --git a/.yarn/cache/terser-webpack-plugin-npm-5.3.3-659a8e4514-db2bc0e570.zip b/.yarn/cache/terser-webpack-plugin-npm-5.3.3-659a8e4514-db2bc0e570.zip
diff --git a/.yarn/cache/workerpool-npm-6.2.0-d2a722f6bb-c7dce6eae0.zip b/.yarn/cache/workerpool-npm-6.2.0-d2a722f6bb-c7dce6eae0.zip
diff --git a/.yarn/cache/workerpool-npm-6.2.1-1486cb2056-3e637f7632.zip b/.yarn/cache/workerpool-npm-6.2.1-1486cb2056-3e637f7632.zip
diff --git a/.yarn/cache/workerpool-npm-6.5.1-7e0dd85ca7-b1b00139fe.zip b/.yarn/cache/workerpool-npm-6.5.1-7e0dd85ca7-b1b00139fe.zip
diff --git a/.yarn/cache/yargs-npm-17.7.2-80b62638e1-abb3e37678.zip b/.yarn/cache/yargs-npm-17.7.2-80b62638e1-abb3e37678.zip
diff --git a/.yarn/cache/yargs-parser-npm-20.2.4-1de20916a6-db8f251ae4.zip b/.yarn/cache/yargs-parser-npm-20.2.4-1de20916a6-db8f251ae4.zip
diff --git a/.yarn/cache/yargs-parser-npm-21.1.1-8fdc003314-9dc2c217ea.zip b/.yarn/cache/yargs-parser-npm-21.1.1-8fdc003314-9dc2c217ea.zip
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -44,7 +44,7 @@ packageExtensions:
       eslint-import-resolver-node: ^0.3.6
   karma-mocha@*:
     dependencies:
-      mocha: ^9.1.2
+      mocha: ^11.1.0
   ts-node@*:
     dependencies:
       typescript: ^3.9.5

diff --git a/packages/bench-suite/package.json b/packages/bench-suite/package.json
@@ -17,7 +17,7 @@
     "dotenv-safe": "^8.2.0",
     "lodash": "^4.17.21",
     "mathjs": "^10.4.3",
-    "mocha": "^10.2.0"
+    "mocha": "^11.1.0"
   },
   "devDependencies": {
     "babel-eslint": "^10.1.0",

diff --git a/packages/dapi-grpc/package.json b/packages/dapi-grpc/package.json
@@ -59,7 +59,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "mocha-sinon": "^2.1.2",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"

diff --git a/packages/dapi/package.json b/packages/dapi/package.json
@@ -66,7 +66,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "mocha-sinon": "^2.1.2",
     "nyc": "^15.1.0",
     "semver": "^7.5.3",

diff --git a/packages/dash-spv/package.json b/packages/dash-spv/package.json
@@ -24,7 +24,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "should": "^13.2.3",
     "sinon": "^17.0.1"
   }

diff --git a/packages/dashmate/package.json b/packages/dashmate/package.json
@@ -106,7 +106,7 @@
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
     "globby": "^11",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "mocha-sinon": "^2.1.2",
     "oclif": "^4.0.3",
     "sinon": "^17.0.1",

diff --git a/packages/dashpay-contract/package.json b/packages/dashpay-contract/package.json
@@ -31,7 +31,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/dpns-contract/package.json b/packages/dpns-contract/package.json
@@ -37,7 +37,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/feature-flags-contract/package.json b/packages/feature-flags-contract/package.json
@@ -38,7 +38,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/js-dapi-client/package.json b/packages/js-dapi-client/package.json
@@ -64,7 +64,7 @@
     "karma-mocha": "^2.0.1",
     "karma-mocha-reporter": "^2.2.5",
     "karma-webpack": "^5.0.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "nyc": "^15.1.0",
     "os-browserify": "^0.3.0",
     "path-browserify": "^1.0.1",

diff --git a/packages/js-dash-sdk/package.json b/packages/js-dash-sdk/package.json
@@ -85,7 +85,7 @@
     "karma-mocha": "^2.0.1",
     "karma-mocha-reporter": "^2.2.5",
     "karma-webpack": "^5.0.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "net": "^1.0.2",
     "nodemon": "^2.0.20",
     "os-browserify": "^0.3.0",
@@ -97,7 +97,7 @@
     "stream-browserify": "^3.0.0",
     "stream-http": "^3.2.0",
     "string_decoder": "^1.3.0",
-    "terser-webpack-plugin": "^5.3.1",
+    "terser-webpack-plugin": "^5.3.11",
     "tls": "^0.0.1",
     "ts-loader": "^9.5.0",
     "ts-mocha": "^10.0.0",

diff --git a/packages/js-grpc-common/package.json b/packages/js-grpc-common/package.json
@@ -19,7 +19,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "mocha-sinon": "^2.1.2",
     "nyc": "^15.1.0",
     "sinon": "^17.0.1",

diff --git a/packages/masternode-reward-shares-contract/package.json b/packages/masternode-reward-shares-contract/package.json
@@ -37,7 +37,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/platform-test-suite/package.json b/packages/platform-test-suite/package.json
@@ -56,7 +56,7 @@
     "karma-sourcemap-loader": "^0.3.7",
     "karma-webpack": "^5.0.0",
     "localforage": "^1.10.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "net": "^1.0.2",
     "nodeforage": "^1.1.2",
     "os-browserify": "^0.3.0",

diff --git a/packages/search-contract/package.json b/packages/search-contract/package.json
@@ -22,7 +22,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/token-history-contract/package.json b/packages/token-history-contract/package.json
@@ -22,7 +22,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/wallet-lib/package.json b/packages/wallet-lib/package.json
@@ -80,7 +80,7 @@
     "karma-mocha-reporter": "^2.2.5",
     "karma-sourcemap-loader": "^0.3.7",
     "karma-webpack": "^5.0.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "node-inspect-extracted": "^1.0.8",
     "nyc": "^15.1.0",
     "os-browserify": "^0.3.0",

diff --git a/packages/wallet-utils-contract/package.json b/packages/wallet-utils-contract/package.json
@@ -22,7 +22,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }

diff --git a/packages/wasm-dpp/package.json b/packages/wasm-dpp/package.json
@@ -73,7 +73,7 @@
     "karma-webpack": "^5.0.0",
     "lodash": "^4.17.21",
     "long": "^5.2.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "path-browserify": "^1.0.1",
     "process": "^0.11.10",
     "sinon": "^17.0.1",

diff --git a/packages/withdrawals-contract/package.json b/packages/withdrawals-contract/package.json
@@ -38,7 +38,7 @@
     "eslint": "^8.53.0",
     "eslint-config-airbnb-base": "^15.0.0",
     "eslint-plugin-import": "^2.29.0",
-    "mocha": "^10.2.0",
+    "mocha": "^11.1.0",
     "sinon": "^17.0.1",
     "sinon-chai": "^3.7.0"
   }