From 4c5ef84443876c7f61c6ab6a31505a5a0b7e20fc Mon Sep 17 00:00:00 2001 From: maximus Date: Mon, 3 Aug 2026 21:59:49 +0200 Subject: [PATCH] security: downgrade react-router vers v6.30.4 pour patcher CSRF --- package.json | 2 +- pnpm-lock.yaml | 67 ++++++++++++++++++++------------------------- pnpm-workspace.yaml | 3 ++ 3 files changed, 34 insertions(+), 38 deletions(-) create mode 100644 pnpm-workspace.yaml diff --git a/package.json b/package.json index 560fff4..a5f129d 100644 --- a/package.json +++ b/package.json @@ -40,4 +40,4 @@ "vite": "^8.2.0", "vitest": "^4.1.10" } -} +} \ No newline at end of file diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 72ba7df..e854109 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -4,6 +4,10 @@ settings: autoInstallPeers: true excludeLinksFromLockfile: false +overrides: + react-router: ^6.30.4 + react-router-dom: ^6.30.4 + importers: .: @@ -13,7 +17,7 @@ importers: version: 4.3.3(vite@8.2.0(@types/node@24.13.3)(jiti@2.7.0)) '@zitadel/react-auth': specifier: ^1.2.1 - version: 1.2.1(oidc-client-ts@3.5.0)(react-dom@19.2.8(react@19.2.8))(react-router-dom@7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8))(react@19.2.8) + version: 1.2.1(oidc-client-ts@3.5.0)(react-dom@19.2.8(react@19.2.8))(react-router-dom@6.30.4(react-dom@19.2.8(react@19.2.8))(react@19.2.8))(react@19.2.8) clsx: specifier: ^2.1.1 version: 2.1.1 @@ -39,8 +43,8 @@ importers: specifier: ^19.2.8 version: 19.2.8(react@19.2.8) react-router-dom: - specifier: ^7.18.2 - version: 7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8) + specifier: ^6.30.4 + version: 6.30.4(react-dom@19.2.8(react@19.2.8))(react@19.2.8) tailwind-merge: specifier: ^3.6.0 version: 3.6.0 @@ -255,6 +259,10 @@ packages: '@oxc-project/types@0.142.0': resolution: {integrity: sha512-7W+2q5AKQVU36fkaryontrHn3YDt1RyUYXatw9i5H8ocYe2sPKSFB6eS8WNPeRKiN1qAWWZUPm7gwFzJGrccqQ==} + '@remix-run/router@1.23.3': + resolution: {integrity: sha512-4An71tdz9X8+3sI4Qqqd2LWd9vS39J7sqd9EU4Scw7TJE/qB10Flv/UuqbPVgfQV9XoK8Np6jNquZitnZq5i+Q==} + engines: {node: '>=14.0.0'} + '@rolldown/binding-android-arm64@1.2.1': resolution: {integrity: sha512-02hOeOSryYxVrOIphmLAsqnCJWxwlzFk+pEt/N/i6OgT3lShHO7xGCU5cpgchRDHboAEbSjzgGh+O/u1GswQmA==} engines: {node: ^20.19.0 || >=22.12.0} @@ -586,7 +594,7 @@ packages: oidc-client-ts: '>=3.0.0' react: '>=18.0.0' react-dom: '>=18.0.0' - react-router-dom: '>=6.0.0' + react-router-dom: ^6.30.4 peerDependenciesMeta: react-router-dom: optional: true @@ -640,10 +648,6 @@ packages: convert-source-map@2.0.0: resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==} - cookie@1.1.1: - resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==} - engines: {node: '>=18'} - cross-spawn@7.0.6: resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==} engines: {node: '>= 8'} @@ -1112,22 +1116,18 @@ packages: peerDependencies: react: ^19.2.8 - react-router-dom@7.18.2: - resolution: {integrity: sha512-AIKJ/jgGlFb3EbfCXk5Gzshiwt+l3mqbCrNjmEWMMjqQxNJ3svBa6bgzFyCC2Sw3RA0VWF1kg3uQf2OFhxb8hw==} - engines: {node: '>=20.0.0'} + react-router-dom@6.30.4: + resolution: {integrity: sha512-q4HvNl+mmDdkS0g+MqiBZNteQJCuimWoOyHMy4T/RQLAn9Z29+E91QXRaxOujeMl2HTzRSS0KFPd7lxX3PjV0Q==} + engines: {node: '>=14.0.0'} peerDependencies: - react: '>=18' - react-dom: '>=18' + react: '>=16.8' + react-dom: '>=16.8' - react-router@7.18.2: - resolution: {integrity: sha512-aUVMjFm3GAPTTZL7oYr5E7ETiqfQCHRLH+B+5afnICvf0r7kkK4eR6SMuwbSTJw/7t+12khT/Kahij49fqOCIg==} - engines: {node: '>=20.0.0'} + react-router@6.30.4: + resolution: {integrity: sha512-SVUsDe+DybHM/WmYKIVYhZh1o5Dcuf16yM6WjG02Q9XVFMZIJyHYhwrr6bFBXZkVP6z69kNkMyBCujt8FaFLJA==} + engines: {node: '>=14.0.0'} peerDependencies: - react: '>=18' - react-dom: '>=18' - peerDependenciesMeta: - react-dom: - optional: true + react: '>=16.8' react@19.2.8: resolution: {integrity: sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==} @@ -1150,9 +1150,6 @@ packages: engines: {node: '>=10'} hasBin: true - set-cookie-parser@2.7.2: - resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==} - shebang-command@2.0.0: resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==} engines: {node: '>=8'} @@ -1548,6 +1545,8 @@ snapshots: '@oxc-project/types@0.142.0': {} + '@remix-run/router@1.23.3': {} + '@rolldown/binding-android-arm64@1.2.1': optional: true @@ -1836,13 +1835,13 @@ snapshots: convert-source-map: 2.0.0 tinyrainbow: 3.1.1 - '@zitadel/react-auth@1.2.1(oidc-client-ts@3.5.0)(react-dom@19.2.8(react@19.2.8))(react-router-dom@7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8))(react@19.2.8)': + '@zitadel/react-auth@1.2.1(oidc-client-ts@3.5.0)(react-dom@19.2.8(react@19.2.8))(react-router-dom@6.30.4(react-dom@19.2.8(react@19.2.8))(react@19.2.8))(react@19.2.8)': dependencies: oidc-client-ts: 3.5.0 react: 19.2.8 react-dom: 19.2.8(react@19.2.8) optionalDependencies: - react-router-dom: 7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8) + react-router-dom: 6.30.4(react-dom@19.2.8(react@19.2.8))(react@19.2.8) acorn-jsx@5.3.2(acorn@8.18.0): dependencies: @@ -1883,8 +1882,6 @@ snapshots: convert-source-map@2.0.0: {} - cookie@1.1.1: {} - cross-spawn@7.0.6: dependencies: path-key: 3.1.1 @@ -2269,19 +2266,17 @@ snapshots: react: 19.2.8 scheduler: 0.27.0 - react-router-dom@7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8): + react-router-dom@6.30.4(react-dom@19.2.8(react@19.2.8))(react@19.2.8): dependencies: + '@remix-run/router': 1.23.3 react: 19.2.8 react-dom: 19.2.8(react@19.2.8) - react-router: 7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8) + react-router: 6.30.4(react@19.2.8) - react-router@7.18.2(react-dom@19.2.8(react@19.2.8))(react@19.2.8): + react-router@6.30.4(react@19.2.8): dependencies: - cookie: 1.1.1 + '@remix-run/router': 1.23.3 react: 19.2.8 - set-cookie-parser: 2.7.2 - optionalDependencies: - react-dom: 19.2.8(react@19.2.8) react@19.2.8: {} @@ -2312,8 +2307,6 @@ snapshots: semver@7.8.5: {} - set-cookie-parser@2.7.2: {} - shebang-command@2.0.0: dependencies: shebang-regex: 3.0.0 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml new file mode 100644 index 0000000..df7c96f --- /dev/null +++ b/pnpm-workspace.yaml @@ -0,0 +1,3 @@ +overrides: + react-router: "^6.30.4" + react-router-dom: "^6.30.4" \ No newline at end of file