[Snyk] Upgrade csurf from 1.9.0 to 1.11.0

[snyk-bot]

Snyk has created this PR to upgrade csurf from 1.9.0 to 1.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2020-01-19.

Release notes

Package name: csurf

• 1.11.0 - 2020-01-19
  
  • deps: [email protected]
    • Add SameSite=None support
  • deps: http-errors@~1.7.3
    • deps: [email protected]
• 1.10.0 - 2019-04-23
  
  • deps: [email protected]
    • Remove base64-url dependency
    • deps: [email protected]
    • deps: [email protected]
  • deps: http-errors@~1.7.2
    • Make message property enumerable for HttpErrors
    • Set constructor name when possible
    • deps: depd@~1.1.2
    • deps: [email protected]
    • deps: [email protected]
    • deps: statuses@'>= 1.5.0 < 2'
  • perf: remove argument reassignment
  • perf: use plain object for internal cookie options
• 1.9.0 - 2016-05-27
  
  • Pass invalid csrf token error to next() instead of throwing
  • Pass misconfigured error to next() instead of throwing
  • Provide misconfigured error when using cookies without cookie-parser
  • deps: [email protected]
    • Add sameSite option
    • Fix cookie Max-Age to never be a floating point number
    • Improve error message when expires is not a Date
    • Throw better error for invalid argument to parse
    • Throw on invalid values provided to serialize
    • perf: enable strict mode
    • perf: hoist regular expression
    • perf: use for loop in parse
    • perf: use string concatination for serialization
  • deps: csrf@~3.0.3
    • Use tsscmp module for timing-safe token verification
    • deps: [email protected]
    • deps: [email protected]
    • deps: [email protected]
  • deps: http-errors@~1.5.0
    • Add HttpError export, for err instanceof createError.HttpError
    • Support new code 421 Misdirected Request
    • Use setprototypeof module to replace __proto__ setting
    • deps: [email protected]
    • deps: statuses@'>= 1.3.0 < 2'
    • perf: enable strict mode
  • perf: enable strict mode
  • perf: remove argument reassignment

from csurf GitHub release notes

Commit messages

Package name: csurf

• daaeb5d 1.11.0
• 62429d0 build: [email protected]
• daab742 build: [email protected]
• 9660c1e build: [email protected]
• a18eef0 build: [email protected]
• 2745086 deps: [email protected]
• 445eda6 docs: add reference links in readme for patterns
• 05307de build: [email protected]
• f35b20e build: [email protected]
• 2601bf3 build: [email protected]
• 5b9895d build: [email protected]
• 37210fa build: [email protected]
• c72dd73 build: [email protected]
• 0067a6d build: [email protected]
• f3375cd build: [email protected]
• 0cf4c24 build: support Node.js 13.x
• 49dd557 build: [email protected]
• 998a03f build: [email protected]
• 53582f4 build: [email protected]
• aec9806 build: [email protected]
• 5e36b02 build: [email protected]
• c0101d3 deps: http-errors@~1.7.3
• fd49c97 lint: apply standard 14 style
• 004139d build: [email protected]

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs