express-minify-html

express-minify-html copied to clipboard

express-minify-html uses an outdated version of [clean-css](https://github.com/clean-css/clean-css) and becomes vulnerable to Regular Expression Denial of Service attacks. The vulnerability cannot be resolved by a simple `npm audit fix --force` on...

Scr1pting

Not sure of default minifyJS value

1

The source code declares an object with some default values, but I don't see `minifyJS` there. Is this assumed to be false by default?

mcandre

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.0.6 to 4.7.6. Changelog Sourced from handlebars's changelog. v4.7.6 - April 3rd, 2020 Chore/Housekeeping: #1672 - Switch cmd parser to latest minimist (@dougwilson Compatibility notes: Restored Node.js...

dependabot[bot]

Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.0 to 4.6.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

updating dependencies to resolve several npm audit issues

5

Most recent: https://www.npmjs.com/advisories/1066

ma-jahn

Update lodash.merge to 4.6.2 to resolve security vulnerability

7

Hi! The guys at npm found a security vulnerability with lodash, which was fixed in 4.6.2: 

meszaros-lajos-gyorgy

<pre>, <textarea> and <code> tags

3

Content of `pre`, `textarea` and `code` tags should not be minified, even if HTML whitespace collapsing is enabled (must be an exception like inside of tags & props).

bob6664569

Must be to Error handler

1

In my scenario if html-minify has error then whole server is down! I think, that html-minify must be in try{...}catch(err){...} to prevent server down, and if err then return original...

devalexqt

catch exceptions in minify lib and pass the error to the express cb

5

Hi, I ran into some problems with the middleware when the `minify` library throws an exception.

simonmilz

Apply minification to inline JS, CSS

1

I set `minifyJS` to `true`, but my inline JavaScript snippets are not being minified. Could express-minify-html minify inline JS, and inline CSS as well? That could also reduce our bandwidth...

mcandre