mirror of
https://github.com/yu-i-i/overleaf-cep.git
synced 2026-11-12 21:23:45 +01:00
5dccf3b62c
* bump socket.io-client to overleaf fork 0.9.17-overleaf-6 Fixes GHSA-96hv-2xvq-fx4p (ws memory exhaustion DoS) by bumping the overleaf/socket.io-client fork to a version that declares ws@^8.21.0 instead of ws@^1.1.5. The existing ws@npm:^8 resolution pins it to 8.21.0, removing ws@1.1.5 from yarn.lock entirely. Depends on overleaf/socket.io-client#6. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * use 0.9.17-overleaf-6 tag for socket.io-client Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * use the socket.io-client-0.9.17-overleaf-6 release * provide ws module for real-time acceptance tests --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Brian Gough <briangough@users.noreply.github.com> Co-authored-by: Brian Gough <brian.gough@overleaf.com> GitOrigin-RevId: 2d9a42f90bcf95a3a8f053df4c0092c4fbc26422
56 lines
2.0 KiB
JSON
56 lines
2.0 KiB
JSON
{
|
|
"name": "@overleaf/real-time",
|
|
"description": "The socket.io layer of Overleaf for real-time editor interactions",
|
|
"private": true,
|
|
"main": "app.js",
|
|
"type": "module",
|
|
"scripts": {
|
|
"start": "node app.js",
|
|
"test:acceptance:_run": "mocha --recursive --timeout 15000 --exit --retries=$RETRIES $@ test/acceptance/js",
|
|
"test:acceptance": "yarn run test:acceptance:_run -- --grep=$MOCHA_GREP",
|
|
"test:unit:_run": "vitest --config ./vitest.config.unit.cjs",
|
|
"test:unit": "yarn run test:unit:_run",
|
|
"nodemon": "node --watch app.js",
|
|
"lint": "eslint --cache --cache-location ../../.cache/eslint/ --max-warnings 0 --format unix .",
|
|
"lint:fix": "eslint --cache --cache-location ../../.cache/eslint/ --fix .",
|
|
"types:check": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@overleaf/fetch-utils": "workspace:*",
|
|
"@overleaf/logger": "workspace:*",
|
|
"@overleaf/metrics": "workspace:*",
|
|
"@overleaf/o-error": "workspace:*",
|
|
"@overleaf/promise-utils": "workspace:*",
|
|
"@overleaf/redis-wrapper": "workspace:*",
|
|
"@overleaf/settings": "workspace:*",
|
|
"@overleaf/validation-tools": "workspace:*",
|
|
"async": "^3.2.5",
|
|
"base64id": "0.1.0",
|
|
"bunyan": "^1.8.15",
|
|
"connect-redis": "^6.1.3",
|
|
"cookie-parser": "^1.4.6",
|
|
"express": "4.22.1",
|
|
"express-session": "^1.17.1",
|
|
"lodash": "^4.18.1",
|
|
"proxy-addr": "^2.0.7",
|
|
"socket.io": "github:overleaf/socket.io#0.9.19-overleaf-12",
|
|
"socket.io-client": "https://github.com/overleaf/socket.io-client/archive/refs/tags/0.9.17-overleaf-6.tar.gz",
|
|
"zod-validation-error": "^4.0.1"
|
|
},
|
|
"devDependencies": {
|
|
"chai": "^4.3.6",
|
|
"chai-as-promised": "^7.1.1",
|
|
"cookie-signature": "^1.1.0",
|
|
"mocha": "^11.1.0",
|
|
"mocha-junit-reporter": "^2.2.1",
|
|
"mocha-multi-reporters": "^1.5.1",
|
|
"sinon": "^9.2.4",
|
|
"sinon-chai": "3.7.0",
|
|
"timekeeper": "0.0.4",
|
|
"typescript": "^5.0.4",
|
|
"uid-safe": "^2.1.5",
|
|
"vitest": "4.1.5",
|
|
"ws": "^8.21.0"
|
|
}
|
|
}
|