Flaredown
Flaredown copied to clipboard
rubyforgood
Flaredown web app and API
Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4. Release notes Sourced from webpack-dev-middleware's releases. v5.3.4 5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac) Changelog Sourced from...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6. Commits 35a517c Release version 1.15.6 of the npm package. c4f847f Drop Proxy-Authorization across hosts. 8526b4a Use GitHub for disclosure. b1677ce Release version 1.15.5 of...
There is currently two PRs open to tackle this but they haven't been touched for a while. This could be done together with https://github.com/rubyforgood/Flaredown/issues/710 Current PRs: - https://github.com/rubyforgood/Flaredown/pull/650 - https://github.com/rubyforgood/Flaredown/pull/640...
Bumps [globalize](https://github.com/globalize/globalize) from 6.0.1 to 6.3.0. Changelog Sourced from globalize's changelog. 6.3.0 (2023-10-22) Support ruby 3.2 rails 7.1 (#810)(globalize/globalize#810) by Shinichi Maeshima 6.2.1 (2022-05-24) Changed serialize method in Rails 6.1.0+...
Bumps [omniauth](https://github.com/omniauth/omniauth) from 1.8.1 to 2.1.2. Release notes Sourced from omniauth's releases. v2.1.0 This release adds Ruby 3.0+ support. Due to kwarg changes in ruby 3, we have bumped the...
Bumps [ip](https://github.com/indutny/node-ip) from 1.1.8 to 1.1.9. Commits 1ecbf2f 1.1.9 6a3ada9 lib: fixed CVE-2023-42282 and added unit test See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a...
From the README: > On first load, the app displays a blank beige screen instead of the login screen. Temporary fix is to add `console.log(process.env.FACEBOOK_APP_ID)` right inside of the module.exports...