-
Notifications
You must be signed in to change notification settings - Fork 43
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: validate encode input and ensure zero-filled Buffer #25
Conversation
@@ -10,7 +10,7 @@ export default function padString(input: string): string { | |||
let position = stringLength; | |||
let padLength = segmentLength - diff; | |||
let paddedStringLength = stringLength + padLength; | |||
let buffer = new Buffer(paddedStringLength); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
depreciated since node 4. Warning in Node 10. likely unsupported in Node 11
Alternatively, drop node 4 support and add engine >=6 - |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Closing #26 as a dupe
You are likely going to have to update lines 7 & 46 in test/base64url.test.js
I would also suggest adding 8 / 10 to the travis yaml
@brianloveswords dropping support for 0.10 and 0.12 is arguably semver-major. Node.js does have a history of landing Semver-Major changes as Semver-Minor for security updates |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM if travis.yml is updated and test is updated as mentioned in above comment
closes #24
requires: node ^4