Antonio-Maranhao opened a new pull request, #1572: URL: https://github.com/apache/couchdb-fauxton/pull/1572
## Overview Fix: - follow-redirects array-form headers bypass cross-origin credential stripping - https://github.com/advisories/GHSA-q3jh-wrc6-jgq8 - follow-redirects sensitiveHeaders regex escaping can expose credential headers - https://github.com/advisories/GHSA-8r9p-f939-6h3c - fast-uri vulnerable to improper path equivalence in relative reference normalization https://github.com/advisories/GHSA-xhq7-xmqj-769h - fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding https://github.com/advisories/GHSA-w74x-v6f9-j3xg ## Testing recommendations CI should pass ## GitHub issue number n/a ## Related Pull Requests n/a ## Checklist - [x] Code is written and works correctly; - [x] Changes are covered by tests; - [ ] Documentation reflects the changes; - [ ] Update [rebar.config.script](https://github.com/apache/couchdb/blob/main/rebar.config.script) with the correct tag once a new Fauxton release is made -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
