From e70c63a210ce3d6c3702d8cad76cb41251911b73 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 20 Jul 2022 15:02:34 +0000
Subject: [PATCH] fix: interface/src/package.json & interface/src/.snyk to
 reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ENGINEIO-1056749
- https://snyk.io/vuln/SNYK-JS-HIGHLIGHTJS-1045326
- https://snyk.io/vuln/SNYK-JS-HIGHLIGHTJS-1048676
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1314893
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1585202
- https://snyk.io/vuln/SNYK-JS-PRISMJS-2404333
- https://snyk.io/vuln/SNYK-JS-PRISMJS-597628
- https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-536840
- https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-570062
- https://snyk.io/vuln/SNYK-JS-SSRI-1246392
- https://snyk.io/vuln/npm:mime:20170907
- https://snyk.io/vuln/npm:qs:20170213
- https://snyk.io/vuln/npm:superagent:20170807
- https://snyk.io/vuln/npm:superagent:20181108


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:extend:20180424
---
 interface/src/.snyk        |  8 ++++++++
 interface/src/package.json | 18 +++++++++++-------
 2 files changed, 19 insertions(+), 7 deletions(-)
 create mode 100644 interface/src/.snyk

diff --git a/interface/src/.snyk b/interface/src/.snyk
new file mode 100644
index 00000000..7d93db7d
--- /dev/null
+++ b/interface/src/.snyk
@@ -0,0 +1,8 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.0
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:extend:20180424':
+    - react-http-request > superagent > extend:
+        patched: '2022-07-20T15:02:33.080Z'
diff --git a/interface/src/package.json b/interface/src/package.json
index fc7a92fc..18772b2f 100644
--- a/interface/src/package.json
+++ b/interface/src/package.json
@@ -3,7 +3,9 @@
     "test": "npm run build",
     "dev": "cross-env NODE_ENV=development webpack-dev-server --progress --colors --config ./webpack.config.js",
     "build": "cross-env NODE_ENV=production webpack -p --progress --colors --config ./webpack.config.js",
-    "build:silent": "cross-env NODE_ENV=production webpack -p --colors --config ./webpack.config.js"
+    "build:silent": "cross-env NODE_ENV=production webpack -p --colors --config ./webpack.config.js",
+    "prepare": "yarn run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "devDependencies": {
     "babel-core": "^6.26.0",
@@ -57,7 +59,7 @@
     "babel-inline-import-loader": "^0.0.5",
     "babel-plugin-inline-import": "^2.0.6",
     "codemirror": "^5.36.0",
-    "copy-webpack-plugin": "^4.5.1",
+    "copy-webpack-plugin": "^5.1.2",
     "history": "^4.7.2",
     "immutability-helper": "^2.6.6",
     "lodash": "^4.17.5",
@@ -75,7 +77,7 @@
     "react-dom": "^16.2.0",
     "react-draggable": "^3.0.5",
     "react-easy-chart": "^1.0.0",
-    "react-http-request": "^1.0.4",
+    "react-http-request": "^2.0.0",
     "react-inspector": "^2.2.2",
     "react-json-view": "^1.16.1",
     "react-linkify": "^0.2.2",
@@ -85,14 +87,16 @@
     "react-rnd": "^7.4.0",
     "react-router-dom": "^4.2.2",
     "react-router-redux": "^5.0.0-alpha.9",
-    "react-syntax-highlighter": "^7.0.2",
+    "react-syntax-highlighter": "^13.0.0",
     "redux": "^3.7.2",
     "redux-thunk": "^2.2.0",
-    "socket.io": "^2.0.4",
+    "socket.io": "^3.0.0",
     "socket.io-client": "^2.0.4",
     "source-map-loader": "^0.2.3",
     "tapable": "^1.0.0-beta.5",
-    "uglifyjs-webpack-plugin": "^1.2.4"
+    "uglifyjs-webpack-plugin": "^2.0.0",
+    "@snyk/protect": "latest"
   },
-  "private": false
+  "private": false,
+  "snyk": true
 }