fix(security): bump @react-navigation/core to 7.22.1 via override #119
1 changed files with 4 additions and 0 deletions
|
|
@ -242,6 +242,10 @@ check('every installed metro copy honors the 0.83.x override pin', () => {
|
|||
// @react-navigation/core <= 7.22.0 pulls query-string -> decode-uri-component
|
||||
// <= 0.4.2 (GHSA-vcc3-ghjq-m6fr). 7.22.1 parses queries itself, so the deep
|
||||
// link round trip must still carry query params through.
|
||||
// Scope: this covers @react-navigation/core's own linking helpers only. The
|
||||
// app's deep links (simplliste://task/<id>) are resolved by expo-router's fork
|
||||
// (expo-router/build/fork/getStateFromPath*.js), which still uses
|
||||
// query-string@7 (see #120) and is not exercised here.
|
||||
check('@react-navigation/core is >= 7.22.1 and drops query-string', () => {
|
||||
const core = require('@react-navigation/core/package.json');
|
||||
const [major, minor, patch] = core.version.split('.').map(Number);
|
||||
|
|
|
|||
Loading…
Reference in a new issue