shadynitesh22/gratitudefrontend

Notice board application . Framework Angular Typescript.

GratitideFrontend

This project was generated with Angular CLI version 15.1.1.

Development server

Run ng serve for a dev server. Navigate to http://localhost:4200/. The application will automatically reload if you change any of the source files.

Code scaffolding

Run ng generate component component-name to generate a new component. You can also use ng generate directive|pipe|service|class|guard|interface|enum|module.

Build

Run ng build to build the project. The build artifacts will be stored in the dist/ directory.

Running unit tests

Run ng test to execute the unit tests via Karma.

Running end-to-end tests

Run ng e2e to execute the end-to-end tests via a platform of your choice. To use this command, you need to first add a package that implements end-to-end testing capabilities.

Further help

To get more help on the Angular CLI use ng help or go check out the Angular CLI Overview and Command Reference page.

gratitudefrontend's Issues

ReDoS Vulnerability in ua-parser-js version

Description:
A regular expression denial of service (ReDoS) vulnerability has been discovered in ua-parser-js.

Impact:
This vulnerability bypass the library's MAX_LENGTH input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to get stuck processing for a very long time which results in a denial of service (DoS) condition.

Affected Versions:
All versions of the library prior to version 0.7.33 / 1.0.33.

Patches:
A patch has been released to remove the vulnerable regular expression, update to version 0.7.33 / 1.0.33 or later.

References:
Regular expression Denial of Service - ReDoS

Credits:
Thanks to https://github.com/snyk who first reported the issue.