fix: bump react-pdf and pdfjs-dist to handle cve

Browse Source

Bumps ReactPDF and pdfjs-dist to avoid the CVE that allows
for code execution in pdf's. This change doesn't specifically
upgrade to the latest pdfjs-dist due to issues with top level
await, instead disabling the evaluation of javascript within
the PDF.

...

This commit is contained in:

Mythie

2024-05-23 14:47:26 +10:00

parent d58a88196a

commit 311328471e

4 changed files with 63 additions and 56646 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

2

apps/marketing/public/pdf.worker.min.js vendored

File diff suppressed because one or more lines are too long