Update faye-websocket and websocket-driver to fix security issue

brycekahle · brycekahle · commit 0efb3c9ae2fd · 2020-07-30T23:05:46.000-04:00
Fix #275
diff --git a/.gitignore b/.gitignore
@@ -2,4 +2,4 @@
 node_modules
 lib/*.js
 *~
-package-lock.json
+sockjs-protocol
diff --git a/.npmignore b/.npmignore
@@ -4,4 +4,5 @@ Makefile
 src
 examples
 tests
+scripts
 *~
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -17,9 +17,9 @@
     }
   ],
   "dependencies": {
-    "faye-websocket": "^0.10.0",
+    "faye-websocket": "^0.11.3",
     "uuid": "^3.4.0",
-    "websocket-driver": "0.6.5"
+    "websocket-driver": "^0.7.4"
   },
   "devDependencies": {
     "coffeescript": "^1.12.7"
diff --git a/scripts/test.sh b/scripts/test.sh
@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -e
+
+rm -rf sockjs-protocol
+git clone --depth=1 https://github.com/sockjs/sockjs-protocol.git
+cd sockjs-protocol
+make test_deps pycco_deps
+cd ..
+node tests/test_server/server.js &
+SRVPID=$!
+sleep 1
+
+set +e
+
+cd sockjs-protocol
+./venv/bin/python sockjs-protocol.py
+PASSED=$?
+kill $SRVPID
+exit $PASSED

-Original file line number
+Diff line change
 src
 examples
 tests
 +scripts
 *~