Rolled back express-ws to 4.0.0 due to 5.x not handling invalid web socket flags correctly.

Ylian Saint-Hilaire committed Oct 20, 2023 at 20:07 UTC 25b0ac3a6d7e379c41f6ceda9e3b1ea2c92dbe97
3 files changed +3 -3
dependencies.txt
+1 -1
@@ -5,7 +5,7 @@
5 "cookie-session": "2.0.0",
6 "express": "4.18.2",
7 "express-handlebars": "5.3.5",
8 - "express-ws": "5.0.2",
8 + "express-ws": "4.0.0",
9 "ipcheck": "0.1.0",
10 "minimist": "1.2.8",
11 "multiparty": "4.2.3",
meshcentral.js
+1 -1
@@ -4008,7 +4008,7 @@ function mainStart() {
4008 }
4009
4010 // Build the list of required modules
4011 - var modules = ['archiver@5.3.2','body-parser@1.20.2','cbor@5.2.0','compression@1.7.4','cookie-session@2.0.0','express@4.18.2','express-handlebars@5.3.5','express-ws@5.0.2','ipcheck@0.1.0','minimist@1.2.8','multiparty@4.2.3','@yetzt/nedb','node-forge@1.3.1','ua-parser-js@1.0.36','ws@8.14.2','yauzl@2.10.0'];
4011 + var modules = ['archiver@5.3.2','body-parser@1.20.2','cbor@5.2.0','compression@1.7.4','cookie-session@2.0.0','express@4.18.2','express-handlebars@5.3.5','express-ws@4.0.0','ipcheck@0.1.0','minimist@1.2.8','multiparty@4.2.3','@yetzt/nedb','node-forge@1.3.1','ua-parser-js@1.0.36','ws@8.14.2','yauzl@2.10.0'];
4012 if (require('os').platform() == 'win32') { modules.push('node-windows@0.1.14'); modules.push('loadavg-windows'); if (sspi == true) { modules.push('node-sspi'); } } // Add Windows modules
4013 if (ldap == true) { modules.push('ldapauth-fork'); }
4014 if (ssh == true) { if (nodeVersion < 11) { addServerWarning('MeshCentral SSH support requires NodeJS 11 or higher.', 1); } else { modules.push('ssh2'); } }
package.json
+1 -1
@@ -44,7 +44,7 @@
44 "cookie-session": "2.0.0",
45 "express": "4.18.2",
46 "express-handlebars": "5.3.5",
47 - "express-ws": "5.0.2",
47 + "express-ws": "4.0.0",
48 "ipcheck": "0.1.0",
49 "minimist": "1.2.8",
50 "multiparty": "4.2.3",