1. 21 Sep, 2018 1 commit
  2. 20 Sep, 2018 4 commits
  3. 19 Sep, 2018 4 commits
  4. 18 Sep, 2018 3 commits
  5. 17 Sep, 2018 7 commits
  6. 22 Aug, 2018 2 commits
    • Dan Abramov's avatar
      Bump versions · 96ba7bdd
      Dan Abramov authored
      96ba7bdd
    • Andrew Clark's avatar
      Use file name whitelist to prevent RCE (#4866) · 577a274d
      Andrew Clark authored
      * Use file name whitelist to prevent RCE
      
      Use a whitelist to validate user-provided file names. This doesn't cover
      the entire range of valid filenames but should cover almost all of them
      in practice. Allows letters, numbers, periods, dashes, and underscores.
      Opting to use a whitelist instead of a blacklist because getting this
      wrong leaves us vulnerable to a RCE attack.
      
      * Allow alphabet characters from all languages
      
      Updated the whitelist to /^[\p{L}0-9/.\-_]+$/u, which matches
      alphanumeric characters, periods, dashes, and underscores. Unicode
      property support is stage 4 so I've inlined the transpiled version.
      
      * Only use file name whitelist on Windows
      
      * Log error message if file name does not pass whitelist
      577a274d
  7. 18 Jun, 2018 1 commit
  8. 24 May, 2018 1 commit
  9. 20 May, 2018 1 commit
    • Andreas Cederström's avatar
      - [x] Upgrade to webpack 4.8.X (#4077) · d72678fb
      Andreas Cederström authored
      - [x] Utilize webpack 4 development and production modes
      - [x] Upgrade webpack dev server
      - [x] Webpack 4 compatible release of thread-loader
      - [x] Webpack 4 compatible release of HtmlWebpackPlugin
      - [x] Webpack 4 compatible release of SwPrecacheWebpackPlugin
      - [x] Webpack 4 compatible release of WebpackManifestPlugin
      - [x] Update README
      - [x] Update WebpackDevServerUtils
      - [x] Update InterpolateHtmlPlugin
      - [x] Update ModuleScopePlugin
      - [x] Update WatchMissingNodeModulesPlugin
      - [x] Move UglifyJS options to webpack 4 optimize
      - [x] Move InterpolateHtmlPlugin to make it tapable on HtmlWebpackPlugin
      - [x] vendor splitting via splitChunks.splitChunks (https://twitter.com/wSokra/status/969633336732905474)
      - [x] long term caching via splitChunks.runtimeChunk (https://twitter.com/wSokra/status/969679223278505985)
      - [x] Make sure process.env.NODE_ENV is proxied correctly to `react-error-overlay`
      - [x] Implicit webpack.NamedModulesPlugin in dev config as its default in webpack 4
      - [x] Disable webpack performance hints as we have our own filesize reporter
      - [x] Replace ExtractTextPlugin with MiniCssExtractPlugin
      - [x] Switch to css whole file minification via OptimizeCSSAssetsPlugin rather than per module css minification to gain performance
      d72678fb
  10. 09 May, 2018 1 commit
  11. 08 May, 2018 1 commit
  12. 27 Apr, 2018 2 commits
  13. 13 Apr, 2018 1 commit
  14. 05 Apr, 2018 1 commit
  15. 03 Apr, 2018 1 commit
  16. 23 Mar, 2018 1 commit
  17. 18 Mar, 2018 1 commit
    • Brian Ng's avatar
      Bump babel-related deps (#4159) · cb3f8355
      Brian Ng authored
      * Add explicit dep on plugin-proposal-object-rest-spread to babel-preset-react-app
      
      * Bump babel-related deps to beta.42
      
      * Pass useBuiltIns directly to react-preset
      cb3f8355
  18. 12 Feb, 2018 1 commit
  19. 11 Feb, 2018 1 commit
  20. 10 Feb, 2018 1 commit
    • bradfordlemley's avatar
      Use yarn when running inside yarn workspace. (#3997) · 2c34d5b6
      bradfordlemley authored
      * Run yarn after ejecting.
      
      * On eject, choose to run yarn instead of npm if yarn is available.
      
      * Move monorepo to react-dev-utils.
      
      * Fix lint.
      
      * Rename monorepo to workspaceUtils.
      
      * Add react-dev-utils dep for create-react-app.
      
      * getMonorepo -> findMonorepo
      2c34d5b6
  21. 05 Feb, 2018 1 commit
  22. 23 Jan, 2018 1 commit
  23. 22 Jan, 2018 1 commit
  24. 18 Jan, 2018 1 commit
    • Bond's avatar
      Use custom bit.ly links (#3836) · 9d67605a
      Bond authored
      * change link to advanced deployment
      
      * Use custom CRA link for deployment
      
      * use custom link for minification failure
      
      * update link for deployment
      
      * feedback
      9d67605a