Fix security issue by using Minimist directly.

Author: adunkman

bin/http-server

@@ -8,10 +8,7 @@ var colors     = require('colors/safe'),
     portfinder = require('portfinder'),
     opener     = require('opener'),
     fs         = require('fs'),
-    argv       = require('optimist')
-      .boolean('cors')
-      .boolean('log-ip')
-      .argv;
+    argv       = require('minimist')(process.argv.slice(2));
 var ifaces = os.networkInterfaces();
 
 process.title = 'http-server';

package-lock.json

@@ -84,8 +84,8 @@
     "corser": "^2.0.1",
     "ecstatic": "^3.3.2",
     "http-proxy": "^1.17.0",
+    "minimist": "^1.2.5",
     "opener": "^1.5.1",
-    "optimist": "~0.6.1",
     "portfinder": "^1.0.20",
     "secure-compare": "3.0.1",
     "union": "~0.5.0"