Merge pull request #393 from marek629/request-ip-vulnerability-fix

ReDOS is_js/request-ip vulnerability fix

Author: electerious

CHANGELOG.md

@@ -11,6 +11,10 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) a
 - The official Docker image is now based on Node.js 22 (#343)
 - Netlify builds use Node.js 22 (#343)
 
+### Fixed
+
+- ReDOS vulnerabilty of is_js, the request-ip dependency (thanks @marek629, #392)
+
 ## [3.4.2] - 2022-12-17
 
 ## Changed

package.json

@@ -53,7 +53,7 @@
     "node-fetch": "^2.6.1",
     "node-schedule": "^2.0.0",
     "normalize-url": "^6.0.1",
-    "request-ip": "^2.1.3",
+    "request-ip": "^3.3.0",
     "sanitize-filename": "^1.6.3",
     "signale": "^1.4.0",
     "uuid": "^9.0.0"