Use @sailshq/express

Nested dependencies of this package include @sailshq/qs, which is a forked version of qs 4.0.0 with a patch applied to address security vulnerability: https://snyk.io/vuln/npm:qs:20170213.

lib/hooks/http/initialize.js

@@ -44,7 +44,7 @@ module.exports = function(sails) {
 
       // Required to be here due to dynamic NODE_ENV settings via command line args
       // (i.e. if we `require` this above w/ everything else, the NODE_ENV might not be set properly yet)
-      var express = require('express');
+      var express = require('@sailshq/express');
 
       // Create express app instance.
       var expressApp = express();

lib/hooks/http/view.js

@@ -5,8 +5,8 @@
 var util = require('util');
 var path = require('path');
 var glob = require('glob');
-var ExpressView = require('express/lib/view');
-var expressUtils = require('express/lib/utils');
+var ExpressView = require('@sailshq/express/lib/view');
+var expressUtils = require('@sailshq/express/lib/utils');
 
 
 

lib/hooks/session/index.js

@@ -225,7 +225,7 @@ module.exports = function(app) {
                 // If that fails, attempt to initialize the adapter using express
                 // (required by older session adapters)
                 try {
-                  var CustomStore = SessionAdapter(require('express'));
+                  var CustomStore = SessionAdapter(require('@sailshq/express'));
                   sessionConfig.store = new CustomStore(sessionConfig);
                 }
                 catch (e2) {

lib/router/index.js

@@ -5,7 +5,7 @@
 var Readable = require('stream').Readable;
 var QS = require('querystring');
 var _ = require('@sailshq/lodash');
-var Express = require('express');
+var Express = require('@sailshq/express');
 
 var buildReq = require('./req');
 var buildRes = require('./res');

package.json

@@ -43,7 +43,7 @@
     "csurf": "1.9.0",
     "ejs": "2.3.4",
     "ejs-locals": "1.0.2",
-    "express": "3.21.2",
+    "@sailshq/express": "^3.21.3",
     "express-handlebars": "3.0.0",
     "express-session": "1.14.2",
     "flaverr": "^1.0.0",