Update faye-websocket and websocket-driver to fix security issue

Fix #275
sockjs · Jul 31, 2020 · 0efb3c9 · 0efb3c9
1 parent a0f6afb
commit 0efb3c9
Show file tree

Hide file tree

Showing 5 changed files with 76 additions and 3 deletions.
diff --git a/.gitignore b/.gitignore
@@ -2,4 +2,4 @@
 node_modules
 lib/*.js
 *~
-package-lock.json
+sockjs-protocol
diff --git a/.npmignore b/.npmignore
@@ -4,4 +4,5 @@ Makefile
 src
 examples
 tests
+scripts
 *~
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -17,9 +17,9 @@
     }
   ],
   "dependencies": {
-    "faye-websocket": "^0.10.0",
+    "faye-websocket": "^0.11.3",
     "uuid": "^3.4.0",
-    "websocket-driver": "0.6.5"
+    "websocket-driver": "^0.7.4"
   },
   "devDependencies": {
     "coffeescript": "^1.12.7"

diff --git a/scripts/test.sh b/scripts/test.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -e
+
+rm -rf sockjs-protocol
+git clone --depth=1 https://github.com/sockjs/sockjs-protocol.git
+cd sockjs-protocol
+make test_deps pycco_deps
+cd ..
+node tests/test_server/server.js &
+SRVPID=$!
+sleep 1
+
+set +e
+
+cd sockjs-protocol
+./venv/bin/python sockjs-protocol.py
+PASSED=$?
+kill $SRVPID
+exit $PASSED