diff --git a/dist/query.js b/dist/query.js index 66a7c892..1fac52f6 100644 --- a/dist/query.js +++ b/dist/query.js @@ -40879,6 +40879,7 @@ var require_form_data = __commonJS({ var parseUrl2 = require("url").parse; var fs6 = require("fs"); var Stream = require("stream").Stream; + var crypto = require("crypto"); var mime = require_mime_types(); var asynckit = require_asynckit(); var setToStringTag = require_es_set_tostringtag(); @@ -41084,11 +41085,7 @@ var require_form_data = __commonJS({ return Buffer.concat([dataBuffer, Buffer.from(this._lastBoundary())]); }; FormData2.prototype._generateBoundary = function() { - var boundary = "--------------------------"; - for (var i = 0; i < 24; i++) { - boundary += Math.floor(Math.random() * 10).toString(16); - } - this._boundary = boundary; + this._boundary = "--------------------------" + crypto.randomBytes(12).toString("hex"); }; FormData2.prototype.getLengthSync = function() { var knownLength = this._overheadLength + this._valueLength; diff --git a/package-lock.json b/package-lock.json index 78e53b1e..c2ef8346 100644 --- a/package-lock.json +++ b/package-lock.json @@ -19,7 +19,7 @@ "@octokit/plugin-retry": "^8.0.1", "@octokit/plugin-throttling": "^11.0.1", "ajv": "8.17.1", - "form-data": "^4.0.3", + "form-data": "^4.0.4", "jszip": "3.10.1", "semver": "^7.7.2", "uuid": "^11.1.0", @@ -7336,9 +7336,10 @@ } }, "node_modules/form-data": { - "version": "4.0.3", - "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.3.tgz", - "integrity": "sha512-qsITQPfmvMOSAdeyZ+12I1c+CKSstAFAwu+97zrnWAbIr5u8wfsExUzCesVLC8NgHuRUqNN4Zy6UPWUTRGslcA==", + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz", + "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==", + "license": "MIT", "dependencies": { "asynckit": "^0.4.0", "combined-stream": "^1.0.8", diff --git a/package.json b/package.json index cfbb08c2..bf0cbdd9 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,7 @@ "@octokit/plugin-retry": "^8.0.1", "@octokit/plugin-throttling": "^11.0.1", "ajv": "8.17.1", - "form-data": "^4.0.3", + "form-data": "^4.0.4", "jszip": "3.10.1", "semver": "^7.7.2", "uuid": "^11.1.0",