Merge pull request #2574 from request/safe-buffer

Migrating to safe-buffer for improved security.

lib/helpers.js

@@ -2,6 +2,7 @@
 
 var jsonSafeStringify = require('json-stringify-safe')
   , crypto = require('crypto')
+  , Buffer = require('safe-buffer').Buffer
 
 var defer = typeof setImmediate === 'undefined'
   ? process.nextTick

lib/multipart.js

@@ -3,6 +3,7 @@
 var uuid = require('uuid')
   , CombinedStream = require('combined-stream')
   , isstream = require('isstream')
+  , Buffer = require('safe-buffer').Buffer
 
 
 function Multipart (request) {

lib/oauth.js

@@ -6,6 +6,7 @@ var url = require('url')
   , uuid = require('uuid')
   , oauth = require('oauth-sign')
   , crypto = require('crypto')
+  , Buffer = require('safe-buffer').Buffer
 
 
 function OAuth (request) {

package.json

@@ -44,9 +44,10 @@
     "oauth-sign": "~0.8.1",
     "performance-now": "^0.2.0",
     "qs": "~6.3.0",
+    "safe-buffer": "^5.0.1",
     "stringstream": "~0.0.4",
     "tough-cookie": "~2.3.0",
-    "tunnel-agent": "~0.4.1",
+    "tunnel-agent": "^0.5.0",
     "uuid": "^3.0.0"
   },
   "scripts": {

request.js

@@ -29,6 +29,7 @@ var http = require('http')
   , Redirect = require('./lib/redirect').Redirect
   , Tunnel = require('./lib/tunnel').Tunnel
   , now = require('performance-now')
+  , Buffer = require('safe-buffer').Buffer
 
 var safeStringify = helpers.safeStringify
   , isReadStream = helpers.isReadStream