security(ssr-helpers): do not leak currentScript when on SSR with Pin…

…ia/Vuex
quasarframework · Jan 13, 2023 · 4a9eed0 · 4a9eed0
1 parent 011320c
commit 4a9eed0
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/utils/ssr-helpers/create-renderer.js b/utils/ssr-helpers/create-renderer.js
@@ -107,7 +107,7 @@ function renderStyles (renderContext, usedAsyncFiles, ssrContext) {
   )
 }
 
-const autoRemove = 'var currentScript=document.currentScript;currentScript.parentNode.removeChild(currentScript)'
+const autoRemove = 'document.currentScript.remove()'
 
 function renderVuexState (ssrContext, nonce) {
   const state = serialize(ssrContext.state, { isJSON: true })

diff --git a/utils/ssr-helpers/package.json b/utils/ssr-helpers/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@quasar/ssr-helpers",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "description": "Quasar Framework helper package for SSR",
   "author": {
     "name": "Razvan Stoenescu",
@@ -25,6 +25,6 @@
     "access": "public"
   },
   "dependencies": {
-    "serialize-javascript": "^5.0.1"
+    "serialize-javascript": "^6.0.0"
   }
 }