1. 27 Sep, 2018 3 commits
  2. 26 Sep, 2018 2 commits
    • Joe Haddad's avatar
      Publish · ac5376f9
      Joe Haddad authored
       - babel-plugin-named-asset-import@0.2.0
       - babel-preset-react-app@4.0.0
       - confusing-browser-globals@1.0.1
       - create-react-app@2.0.0
       - eslint-config-react-app@3.0.0
       - react-app-polyfill@0.1.0
       - react-dev-utils@6.0.0
       - react-error-overlay@5.0.0
       - react-scripts@2.0.0
      ac5376f9
    • Joe Haddad's avatar
      Make Sass missing message friendlier (#4514) · 1448b241
      Joe Haddad authored
      * Tweak browser support section
      
      * Make sass message friendlier
      
      * Tweak message
      
      * Tweak message futher
      
      * test
      1448b241
  3. 25 Sep, 2018 1 commit
  4. 24 Sep, 2018 3 commits
  5. 22 Sep, 2018 1 commit
  6. 21 Sep, 2018 3 commits
  7. 20 Sep, 2018 4 commits
  8. 19 Sep, 2018 4 commits
  9. 18 Sep, 2018 3 commits
  10. 17 Sep, 2018 7 commits
  11. 22 Aug, 2018 5 commits
    • Dan Abramov's avatar
      Bump release · 550fccb6
      Dan Abramov authored
      550fccb6
    • Dan Abramov's avatar
      Bump versions · ca88a69b
      Dan Abramov authored
      ca88a69b
    • Dan Abramov's avatar
      Bump versions · 96ba7bdd
      Dan Abramov authored
      96ba7bdd
    • Andrew Clark's avatar
      Use file name whitelist to prevent RCE (#4866) · 24b101d2
      Andrew Clark authored
      * Use file name whitelist to prevent RCE
      
      Use a whitelist to validate user-provided file names. This doesn't cover
      the entire range of valid filenames but should cover almost all of them
      in practice. Allows letters, numbers, periods, dashes, and underscores.
      Opting to use a whitelist instead of a blacklist because getting this
      wrong leaves us vulnerable to a RCE attack.
      
      * Allow alphabet characters from all languages
      
      Updated the whitelist to /^[\p{L}0-9/.\-_]+$/u, which matches
      alphanumeric characters, periods, dashes, and underscores. Unicode
      property support is stage 4 so I've inlined the transpiled version.
      
      * Only use file name whitelist on Windows
      
      * Log error message if file name does not pass whitelist
      24b101d2
    • Andrew Clark's avatar
      Use file name whitelist to prevent RCE (#4866) · 577a274d
      Andrew Clark authored
      * Use file name whitelist to prevent RCE
      
      Use a whitelist to validate user-provided file names. This doesn't cover
      the entire range of valid filenames but should cover almost all of them
      in practice. Allows letters, numbers, periods, dashes, and underscores.
      Opting to use a whitelist instead of a blacklist because getting this
      wrong leaves us vulnerable to a RCE attack.
      
      * Allow alphabet characters from all languages
      
      Updated the whitelist to /^[\p{L}0-9/.\-_]+$/u, which matches
      alphanumeric characters, periods, dashes, and underscores. Unicode
      property support is stage 4 so I've inlined the transpiled version.
      
      * Only use file name whitelist on Windows
      
      * Log error message if file name does not pass whitelist
      577a274d
  12. 18 Jun, 2018 1 commit
  13. 24 May, 2018 1 commit
  14. 20 May, 2018 1 commit
    • Andreas Cederström's avatar
      - [x] Upgrade to webpack 4.8.X (#4077) · d72678fb
      Andreas Cederström authored
      - [x] Utilize webpack 4 development and production modes
      - [x] Upgrade webpack dev server
      - [x] Webpack 4 compatible release of thread-loader
      - [x] Webpack 4 compatible release of HtmlWebpackPlugin
      - [x] Webpack 4 compatible release of SwPrecacheWebpackPlugin
      - [x] Webpack 4 compatible release of WebpackManifestPlugin
      - [x] Update README
      - [x] Update WebpackDevServerUtils
      - [x] Update InterpolateHtmlPlugin
      - [x] Update ModuleScopePlugin
      - [x] Update WatchMissingNodeModulesPlugin
      - [x] Move UglifyJS options to webpack 4 optimize
      - [x] Move InterpolateHtmlPlugin to make it tapable on HtmlWebpackPlugin
      - [x] vendor splitting via splitChunks.splitChunks (https://twitter.com/wSokra/status/969633336732905474)
      - [x] long term caching via splitChunks.runtimeChunk (https://twitter.com/wSokra/status/969679223278505985)
      - [x] Make sure process.env.NODE_ENV is proxied correctly to `react-error-overlay`
      - [x] Implicit webpack.NamedModulesPlugin in dev config as its default in webpack 4
      - [x] Disable webpack performance hints as we have our own filesize reporter
      - [x] Replace ExtractTextPlugin with MiniCssExtractPlugin
      - [x] Switch to css whole file minification via OptimizeCSSAssetsPlugin rather than per module css minification to gain performance
      d72678fb
  15. 09 May, 2018 1 commit