Skip to:
Content

BuddyPress.org

Opened 11 years ago

Closed 11 years ago

Last modified 10 years ago

#6600 closed enhancement (fixed)

Update grunt-contrib-uglify to 0.9.2

Reported by: netweb Owned by: djpaul
Priority: normal Milestone: 2.4
Component: Build/Test Tools Version:
Severity: normal Keywords: has-patch commit
Cc:

Description

Via ​#WP33533

Updated grunt-contrib-uglify version 0.9.2 includes an update to UglifyJS, which fixes a bug that can cause logic bugs to be introduced into minified JS.

Ref: ​https://zyan.scripts.mit.edu/blog/backdooring-js/

Update grunt-contrib-uglify to v0.9.2

Changelog: ​https://github.com/gruntjs/grunt-contrib-uglify/compare/v0.9.1...v0.9.2

UglifyJS Changelog: ​https://github.com/mishoo/UglifyJS2/compare/v2.4.23...v2.4.24

Note: BuddyPress' current compiled/minified JS is not affected, tested via comparing JS files in /build before and after.

Attachments (1)

6600.diff​ (471 bytes ) - added by netweb 11 years ago.

Download all attachments as: .zip

Change History (4)

@netweb
11 years ago

#1 @djpaul
11 years ago

  • Owner set to djpaul
  • Resolution → fixed
  • Status new → closed

In 10228:

Build tools: update grunt-contrib-uglify to 0.9.2

Fixes #6600

Props netweb

#2 @DJPaul
10 years ago

  • Component Tools - Build Process → Build/Test Tools

#3 @DJPaul
10 years ago

  • Type task → enhancement
Note: See TracTickets for help on using tickets.