Bump version to 3.4.9

Update dependencies
Merge branch 'whalehub-patch-1' into master
2025-12-08 07:00:54 +03:00 · 2021-04-21 21:52:18 +02:00 · 2021-04-21 21:51:12 +02:00 · 2021-04-21 21:49:21 +02:00 · 2021-04-21 21:40:15 +02:00 · 2021-04-20 20:37:16 +02:00
3 changed files with 10 additions and 10 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
  "name": "send",
-  "version": "3.4.8",
+  "version": "3.4.9",
  "lockfileVersion": 1,
  "requires": true,
  "dependencies": {
@@ -4280,9 +4280,9 @@
      }
    },
    "aws-sdk": {
-      "version": "2.889.0",
+      "version": "2.890.0",
-      "resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.889.0.tgz",
+      "resolved": "https://registry.npmjs.org/aws-sdk/-/aws-sdk-2.890.0.tgz",
-      "integrity": "sha512-+v77GmIJKXT3GMDg/HF9x8c7RSVU8Imfp/0n0Tuzf5AAE6eavpD3xzHABiK9zO9f+T8XzJDytl66UQ33YXavng==",
+      "integrity": "sha512-39rVXw0aJVnBpVSbZ6ZBaNop8VwkNKx9n+auxQdNnAJtJ9dftgWo4AZYXg0a5lMxIL7AmnlPXWAVPOWHvCeuJg==",
      "requires": {
        "buffer": "4.9.2",
        "events": "1.1.1",
@@ -17750,9 +17750,9 @@
      "dev": true
    },
    "ssri": {
-      "version": "6.0.1",
+      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.2.tgz",
-      "integrity": "sha512-3Wge10hNcT1Kur4PDFwEieXSCMCJs/7WvSACcrMYrNp+b8kDL1/0wJch5Ni2WrtwEa2IO8OsVfeKIciKCDx/QA==",
+      "integrity": "sha512-cepbSq/neFK7xB6A50KHN0xHDotYzq58wWCa5LeWqnPrHG8GzfEjO/4O8kpmcGW+oaxkvhEJCWgbgNk4/ZV93Q==",
      "dev": true,
      "requires": {
        "figgy-pudding": "^3.5.1"
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
  "name": "send",
  "description": "File Sharing Experiment",
-  "version": "3.4.8",
+  "version": "3.4.9",
  "author": "Mozilla (https://mozilla.org)",
  "contributors": [
    "Tim Visee <3a4fb3964f@sinenomine.email> (https://timvisee.com)"
@@ -137,7 +137,7 @@
    "@fluent/langneg": "^0.3.0",
    "@google-cloud/storage": "^5.8.4",
    "@sentry/node": "^5.30.0",
-    "aws-sdk": "^2.889.0",
+    "aws-sdk": "^2.890.0",
    "body-parser": "^1.19.0",
    "choo": "^7.0.0",
    "cldr-core": "^35.1.0",
--- a/server/routes/index.js
+++ b/server/routes/index.js
@@ -38,7 +38,7 @@ module.exports = function(app) {
          "'self'",
          config.base_url.replace(/^https:\/\//, 'wss://')
        ],
-        imgSrc: ["'self'"],
+        imgSrc: ["'self'", "data:"],
        scriptSrc: [
          "'self'",
          function(req) {
Author	SHA1	Message	Date
timvisee	eb3a9e8c89	Bump version to 3.4.9	2021-04-21 21:52:18 +02:00
timvisee	6c3ac403f6	Update dependencies	2021-04-21 21:51:12 +02:00
timvisee	1ce2a60dd5	Merge branch 'whalehub-patch-1' into master https://github.com/timvisee/send/pull/19	2021-04-21 21:49:21 +02:00
Aaron	f5bb74e921	index.js: Add "data:" as an allowed image source in CSP Signed-off-by: Aaron <admin@datahoarder.dev>	2021-04-21 21:40:15 +02:00
timvisee	352fba6302	Update dependencies	2021-04-20 20:37:16 +02:00
timvisee	ace2aa5d73	Merge branch 'dependabot/npm_and_yarn/ssri-6.0.2' into master See https://github.com/timvisee/send/pull/18	2021-04-20 20:36:17 +02:00
timvisee	3256b01276	Merge branch 'master' into dependabot/npm_and_yarn/ssri-6.0.2 See https://github.com/timvisee/send/pull/18	2021-04-20 20:35:35 +02:00
dependabot[bot]	32539e58ac	Bump ssri from 6.0.1 to 6.0.2 Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. - [Release notes](https://github.com/npm/ssri/releases) - [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md) - [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2) Signed-off-by: dependabot[bot] <support@github.com>	2021-04-18 09:33:53 +00:00