update urllib to ^2.3.0 and python to v9

jspsych · Jan 8, 2025 · 35bfccc · 35bfccc
1 parent 6707a79
commit 35bfccc
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 72 deletions.
diff --git a/packages/config/rollup.js b/packages/config/rollup.js
@@ -76,22 +76,11 @@ const makeConfig = ({
       input,
       plugins: [
         externals(),
-        modify(
-          {
-            // prettier-ignore
-            find: /'__CITATIONS__'/g,
-            replace: JSON.stringify(citationData, null, 2),
-          },
-          {
-            // Patch to mitigate DOM Clobbering vulnerability
-            find: /document\.currentScript/g,
-            replace: `(typeof document !== 'undefined' &&
-                    document.currentScript &&
-                    document.currentScript.tagName &&
-                    document.currentScript.tagName.toUpperCase() === 'SCRIPT' &&
-                    document.currentScript)`,
-          }
-        ),
+        modify({
+          // prettier-ignore
+          find: /'__CITATIONS__'/g,
+          replace: JSON.stringify(citationData, null, 2),
+        }),
         esbuild({ ...esBuildPluginOptions, target: "node18" }),
         commonjs(commonjsPluginOptions),
       ],
@@ -117,22 +106,11 @@ const makeConfig = ({
       input,
       plugins: [
         externals({ deps: false }),
-        modify(
-          {
-            // prettier-ignore
-            find: /'__CITATIONS__'/g,
-            replace: JSON.stringify(citationData, null, 2),
-          },
-          {
-            // Patch to mitigate DOM Clobbering vulnerability
-            find: /document\.currentScript/g,
-            replace: `(typeof document !== 'undefined' &&
-                    document.currentScript &&
-                    document.currentScript.tagName &&
-                    document.currentScript.tagName.toUpperCase() === 'SCRIPT' &&
-                    document.currentScript)`,
-          }
-        ),
+        modify({
+          // prettier-ignore
+          find: /'__CITATIONS__'/g,
+          replace: JSON.stringify(citationData, null, 2),
+        }),
         resolve({ preferBuiltins: false }),
         esbuild({ ...esBuildPluginOptions, target: "esnext" }),
         commonjs(commonjsPluginOptions),
@@ -152,22 +130,11 @@ const makeConfig = ({
       input,
       plugins: [
         externals({ deps: false }),
-        modify(
-          {
-            // prettier-ignore
-            find: /'__CITATIONS__'/g,
-            replace: JSON.stringify(citationData, null, 2),
-          },
-          {
-            // Patch to mitigate DOM Clobbering vulnerability
-            find: /document\.currentScript/g,
-            replace: `(typeof document !== 'undefined' &&
-                    document.currentScript &&
-                    document.currentScript.tagName &&
-                    document.currentScript.tagName.toUpperCase() === 'SCRIPT' &&
-                    document.currentScript)`,
-          }
-        ),
+        modify({
+          // prettier-ignore
+          find: /'__CITATIONS__'/g,
+          replace: JSON.stringify(citationData, null, 2),
+        }),
         resolve({ preferBuiltins: false }),
         esbuild({ ...esBuildPluginOptions, target: "es2015", minify: true }),
         commonjs(commonjsPluginOptions),

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -2,8 +2,9 @@
 package-mode = false
 
 [tool.poetry.dependencies]
-python = "^3.8"
+python = "^3.9"
 certifi = "^2024.07.04"
+urllib3 = "^2.3.0"
 
 [tool.poetry.dev-dependencies]
 mkdocs = "^1.6.0"