[Snyk] Fix for 5 vulnerabilities by dotam99 · Pull Request #68 · dotam99/cloudflare-docs

dotam99 · 2024-11-13T01:56:39Z

Snyk has created this PR to fix 5 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

developers.cloudflare.com/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	828
	Directory Traversal SNYK-JS-SOURCEMAPSUPPORT-6112477	828
	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	691
	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	676
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	586

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Directory Traversal

The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-CROSSSPAWN-8303230 - https://snyk.io/vuln/SNYK-JS-SOURCEMAPSUPPORT-6112477 - https://snyk.io/vuln/SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555 - https://snyk.io/vuln/SNYK-JS-AXIOS-6032459 - https://snyk.io/vuln/SNYK-JS-AXIOS-6124857

guardrails · 2024-11-13T01:57:45Z

⚠️ We detected 99 security issues in this pull request:

Mode: paranoid | Total findings: 99 | Considered vulnerability: 99

Hard-Coded Secrets (99)

Severity

Details

Docs

Medium

Title: Hex High Entropy String

cloudflare-docs/products/access/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "8f79dc3f8f5840e1bde3fce52a67d62e" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/argo-tunnel/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "65462db7fc30456593591d0ee0384869" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/bots/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "8851304780a744369049e4612d5b7132" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/cloudflare-one/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "d67abaab47504270a65afcf3f6460f5d" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/firewall/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "6405ea2c8e794feca7b5dfcc5e53875a" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/gateway/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "8a91001065b6459483db0b898a58cd2e" }

📚

Medium

Title: Hex High Entropy String

cloudflare-docs/products/warp-client/wrangler.toml

Line 12 in 3edbb8f

{ binding = "REDIRECTS", id = "f28bd6bb32a84aa0b4827c5dc2466bc1" }

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/developers.cloudflare.com/src/components/mdx/directory-listing.js

Line 1 in 3edbb8f

    
           // Keep in sync with https://github.com/cloudflare/cloudflare-docs-engine/blob/ea2031c9575f7785ec9356963fd9cf6e00d2c379/src/components/mdx/directory-listing.js

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/contributing/development-setup.md

Line 9 in 3edbb8f

    
           1. Ensure you’re running node version `>=12.0.0`, as [specified by Docs Engine](https://github.com/cloudflare/cloudflare-docs-engine/blob/765bc30127b0e80b570aade7044036925928c3ea/package.json#L50).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/contributing/development-setup.md

Line 36 in 3edbb8f

    
           4. Run the engine’s [`bootstrap` command](https://github.com/cloudflare/cloudflare-docs-engine/blob/765bc30127b0e80b570aade7044036925928c3ea/bin/commands.sh#L19-L39):

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/contributing/to-cloudflare-docs.md

Line 8 in 3edbb8f

    
           This guide is for contributors to [@cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs). To review the full contribution guidelines, see [Contributing to Cloudflare's Documentation](https://github.com/cloudflare/cloudflare-docs/blob/186d17204a509d4c8514b4c4dafd00974b4713b8/CONTRIBUTING.md).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/faq.md

Line 41 in 3edbb8f

    
           Search is powered by Algolia DocSearch and [must be configured](/reference/configuration) in `docs-config.js`. Make a PR on [@algolia/docsearch-configs](https://github.com/algolia/docsearch-configs/pull/2300) to obtain an `indexName` and `apiKey` (e.g. see the [Workers PR](https://github.com/algolia/docsearch-configs/pull/2300)). Then simply set those values as `search.indexName` and `search.apiKey` (e.g. see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24)). To disable search, set those values to the empty string (e.g. [Docs Engine example site](https://github.com/adamschwartz/docs-engine-example/blob/6d725ffa554454e1daa4c0d2a8a7e44408056e6b/docs-config.js#L21-L24)).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/how-it-works.md

Line 29 in 3edbb8f

    
           However, these files can also be placed inside any sub-folder of your project. When doing this, you’ll need to then customize the `contentRepoFolder` property in `docs-config.js`, which is how the [products inside @cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs/tree/production/products) are all set up, e.g. the [Workers product](https://github.com/cloudflare/cloudflare-docs/blob/1efd366c25bc1bdd1a40f7bc4737310c6b00d15e/products/workers/docs-config.js#L6).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/how-it-works.md

Line 92 in 3edbb8f

    
           The `search` field is used to add a search to the site, powered by Algolia DocSearch. To hide search, set `search.indexName` and `search.apiKey` to the empty string, as in the example above. For an example of a project using search, see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/configuration.md

Line 33 in 3edbb8f

    
           - By default the engine assumes that a docs site’s structure is placed in the root of a project repo. However, this whole structure can also be placed inside any sub-folder by setting this property. For example, this site’s content is inside the [`products/docs-engine` folder](https://github.com/cloudflare/cloudflare-docs/tree/4fd3a4af9507b20bb23fea4d7c4f4cd349c0f463/products/docs-engine) of [@cloudflare/cloudflare-docs](https://github.com/cloudflare/cloudflare-docs) so its `"products/docs-engine"`.

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/configuration.md

Line 48 in 3edbb8f

    
           For an example of a project using search, see the [Workers config](https://github.com/cloudflare/cloudflare-docs/blob/e72247549d20f649786251d0368de19560d1bbb2/products/workers/docs-config.js#L21-L24).

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/pages.md

Line 59 in 3edbb8f

    
           In the [Workers docs](https://developers.cloudflare.com/workers), there’s a partial used in the intro of all of the [Tutorials](https://developers.cloudflare.com/workers/tutorials), called “Before you start” which makes sure folks have the appropriate pre-requisites before starting a Workers tutorial ([source](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/_partials/_tutorials-before-you-start.md)):

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/pages.md

Line 71 in 3edbb8f

    
           Inside the tutorial it’s imported as you would any other MDX component ([source](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/tutorials/build-a-qr-code-generator/index.md)):

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/pages.md

Line 109 in 3edbb8f

    
           You can additional set your own frontmatter props in order to use them as variables inside of your pages. This is how the [Workers “Example” pages](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/examples/alter-headers.md#L12) are constructed.

📚

Medium

Title: Cloudflare API Token

cloudflare-docs/products/docs-engine/src/content/reference/pages.md

Line 123 in 3edbb8f

    
           If within a non-document-type page you’d like to have some content constrained by the normal content column, use the [`<ContentColumn/>` component](/reference/markdown#contentcolumn). The Workers Example pages use this component to [constrain the width](https://github.com/cloudflare/cloudflare-docs/blob/4ba1e70d2a535c93ef6de42b0fc5178dabdb942b/products/workers/src/content/examples/respond-with-another-site.md#L10-L22) of descriptive text while allowing the code example to be showcased.

📚

Medium

Title: Cloudflare Email

cloudflare-docs/.github/workflows/deploy.yml

Line 150 in 3edbb8f