[Snyk] Upgrade csurf from 1.9.0 to 1.11.0

[snyk-bot]

Snyk has created this PR to upgrade csurf from 1.9.0 to 1.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2020-01-19.

Release notes

Package name: csurf

• 1.11.0 - 2020-01-19
  
  • deps: cookie@0.4.0
    • Add SameSite=None support
  • deps: http-errors@~1.7.3
    • deps: inherits@2.0.4
• 1.10.0 - 2019-04-23
  
  • deps: csrf@3.1.0
    • Remove base64-url dependency
    • deps: tsscmp@1.0.6
    • deps: uid-safe@2.1.5
  • deps: http-errors@~1.7.2
    • Make message property enumerable for HttpErrors
    • Set constructor name when possible
    • deps: depd@~1.1.2
    • deps: inherits@2.0.3
    • deps: setprototypeof@1.1.1
    • deps: statuses@'>= 1.5.0 < 2'
  • perf: remove argument reassignment
  • perf: use plain object for internal cookie options
• 1.9.0 - 2016-05-27
  
  • Pass invalid csrf token error to next() instead of throwing
  • Pass misconfigured error to next() instead of throwing
  • Provide misconfigured error when using cookies without cookie-parser
  • deps: cookie@0.3.1
    • Add sameSite option
    • Fix cookie Max-Age to never be a floating point number
    • Improve error message when expires is not a Date
    • Throw better error for invalid argument to parse
    • Throw on invalid values provided to serialize
    • perf: enable strict mode
    • perf: hoist regular expression
    • perf: use for loop in parse
    • perf: use string concatination for serialization
  • deps: csrf@~3.0.3
    • Use tsscmp module for timing-safe token verification
    • deps: base64-url@1.2.2
    • deps: rndm@1.2.0
    • deps: uid-safe@2.1.1
  • deps: http-errors@~1.5.0
    • Add HttpError export, for err instanceof createError.HttpError
    • Support new code 421 Misdirected Request
    • Use setprototypeof module to replace __proto__ setting
    • deps: inherits@2.0.1
    • deps: statuses@'>= 1.3.0 < 2'
    • perf: enable strict mode
  • perf: enable strict mode
  • perf: remove argument reassignment

from csurf GitHub release notes

Commit messages

Package name: csurf

• daaeb5d 1.11.0
• 62429d0 build: mocha@7.0.0
• daab742 build: eslint-plugin-import@2.20.0
• 9660c1e build: cookie-session@1.4.0
• a18eef0 build: Node.js@13.6
• 2745086 deps: cookie@0.4.0
• 445eda6 docs: add reference links in readme for patterns
• 05307de build: nyc@15.0.0
• f35b20e build: eslint-plugin-node@11.0.0
• 2601bf3 build: Node.js@13.5
• 5b9895d build: Node.js@12.14
• 37210fa build: Node.js@10.18
• c72dd73 build: Node.js@8.17
• 0067a6d build: eslint-plugin-import@2.19.1
• f3375cd build: eslint@6.8.0
• 0cf4c24 build: support Node.js 13.x
• 49dd557 build: Node.js@12.13
• 998a03f build: mocha@6.2.2
• 53582f4 build: eslint@6.6.0
• aec9806 build: eslint-plugin-markdown@1.0.1
• 5e36b02 build: Node.js@12.11
• c0101d3 deps: http-errors@~1.7.3
• fd49c97 lint: apply standard 14 style
• 004139d build: mocha@6.2.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs