Skip to content

Commit 3e281d6

Browse files
authored
Update dependencies and address security advisory. (#282)
* Update dependencies. * Add security warning. * Version bump 0.6.1. * Upgrade distro on Travis
1 parent 96e7ddd commit 3e281d6

File tree

5 files changed

+5706
-11
lines changed

5 files changed

+5706
-11
lines changed

.appveyor.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ clone_depth: 5
55

66
environment:
77
matrix:
8-
- nodejs_version: 13
8+
- nodejs_version: 14
99
- nodejs_version: 12
1010
- nodejs_version: 10
1111

.travis.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,12 @@ if: tag IS blank
44
os:
55
- linux
66
- osx
7-
dist: trusty
7+
dist: xenial
88
sudo: required
99

10+
services:
11+
- xvfb
12+
1013
git:
1114
depth: 5
1215

@@ -26,7 +29,7 @@ after_success:
2629

2730
language: node_js
2831
node_js:
29-
- 13
32+
- 14
3033
- 12
3134
- 10
3235

README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ HTML to PDF converter via Chrome/Chromium.
2222
npm install --save html-pdf-chrome
2323
```
2424

25+
## Security
26+
27+
This library is **_NOT_** meant to accept untrusted user input. Doing so may have serious security risks such as Server-Side Request Forgery (SSRF).
28+
2529
## Usage
2630

2731
__Note:__ It is _strongly_ recommended that you keep Chrome running side-by-side with Node.js. There is significant overhead starting up Chrome for each PDF generation which can be easily avoided.

0 commit comments

Comments
 (0)