Last 12 weeks · 0 commits
5 of 6 standards met
Summary Fixes OS command injection in on macOS (CVE-2026-14802 / SNYK-JS-REACTDEVUTILS-17890708). Replaces shell-interpolated with so URL arguments are never interpreted by (same approach as #12590). Adds regression tests covering the AppleScript launch path and the injection payload shape from #17269. Root cause On Darwin, built an command string and passed it through . does not escape shell-significant characters (, , ), so a crafted URL such as could execute arbitrary commands when Chrome was already running. Fix Test plan [x] in (4 passing) [x] On macOS with Chrome running, confirm still reuses an existing tab [x] Confirm a URL containing / does not create side effects on disk when opened via the AppleScript path Closes #17269
Recently I migrated mine react project to typescript with CRA. After a while, builds became slower. (around 300s for the build) Lastly when I converted the following file from .js to .ts: I discovered that with findQuestion() code compiles in more than 1000 s. but if I add FilterQuestions() I get Ineffective mark-compacts near heap allocation failed! To mention that the project starts and runs even if typescript code is not compiled. my package.json file: tsconfig.json file: this is the cli output: this is report issued report.20200201.190457.6860.0.001.json:
Repository: react/create-react-app. Description: Set up a modern web app by running one command. Stars: 103281, Forks: 26917. Primary language: JavaScript. Languages: JavaScript (98.3%), Shell (1.2%), CSS (0.1%), HTML (0.1%), AppleScript (0.1%). License: MIT. Homepage: https://create-react-app.dev/ Topics: build-tools, react, zero-configuration. Latest release: v5.0.1 (4y ago). Open PRs: 100, open issues: 2309. Last activity: 1y ago. Community health: 87%. Top contributors: gaearon, Timer, iansu, ianschmitz, selbekk, fson, mrmckeb, vjeux, viankakrisna, matrush and others.