Skip to content

Commit e343276

Browse files
Ed Papameta-codesync[bot]
authored andcommitted
- Bump express from 4.16.4 to 4.20.0 in quick-start
Summary: Bump express dependency from ^4.16.4 to ^4.20.0 in the messenger-platform-samples quick-start sample app. This addresses the external Dependabot PR #173 on the fbsamples/messenger-platform-samples GitHub repo. Express 4.20.0 includes security fixes (open redirect prevention, backtracking protection in path-to-regexp), updated default depth for URL-encoded parsing, and removal of link renderization in redirects. Reviewed By: shreeshyadav Differential Revision: D99834889 fbshipit-source-id: 7ef8ec99f232bfe35757ef54cae94ef987556815
1 parent 6855cdb commit e343276

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

quick-start/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
"dependencies": {
1010
"body-parser": "^1.20.3",
1111
"dotenv": "^6.2.0",
12-
"express": "^4.16.4",
12+
"express": "^4.20.0",
1313
"request": "^2.88.0"
1414
},
1515
"engines": {

0 commit comments

Comments
 (0)