Patchwork Autofix PR

[patched-codes]

---

• File changed: public/bower_components/firebase/firebase-debug.js
  Replace deprecated Buffer constructor with Buffer.alloc/Buffer.from

  Replaced usages of new Buffer with Buffer.alloc or Buffer.from where needed to avoid using the deprecated constructor.
  Fix vulnerability by hardcoding regular expression

  Hardcoded the regular expression to prevent possible ReDoS vulnerability by eliminating user-supplied input.
  Fix vulnerability by using a hardcoded regular expression

  Replaced the RegExp constructor with a hardcoded regular expression to prevent ReDoS vulnerability.
  Fix security vulnerability by hardcoding regular expression

  Hardcoded the regular expression in the RegExp constructor to prevent user-supplied regex and potential Regular Expression Denial of Service (ReDoS) attack.
  Fix vulnerability by removing call to eval function in DOMStorageWrapper

  Removed the call to 'fb.util.json.eval' function in the DOMStorageWrapper get method.
  Fix vulnerability by removing eval function call

  Replaced the eval function call with JSON.parse to fix the vulnerability.
  Fix vulnerability by removing the call to eval function

  Replaced the call to eval function with JSON.parse method to fix the vulnerability.
  Fix vulnerability by replacing dynamic RegExp constructor with hardcoded RegExp.

  Replaced dynamic RegExp constructor with hardcoded RegExp to prevent Regular Expression Denial of Service.

• File changed: public/bower_components/file-input/gruntfile.js
  Fix dynamic import vulnerability by using hardcoded string literal

  Replaced dynamic import in the config function with a hardcoded string literal to prevent potential security vulnerabilities.

[patched-codes]

File changed public/bower_components/file-input/gruntfile.js:
The code change replaces dynamic import configurations for 'jshint' and 'karma' with hardcoded module imports using 'require'. This modification aims to enhance security by eliminating the use of dynamic imports and thereby mitigating the risk of vulnerabilities associated with dynamic module loading.

File changed public/bower_components/firebase/firebase-debug.js:
The commits include multiple security fixes such as replacing 'eval' function calls with 'JSON.parse' to prevent potential code execution vulnerabilities and substituting the deprecated 'Buffer' constructor with 'Buffer.alloc' or 'Buffer.from'. Additionally, regular expressions have been hardcoded to prevent Regular Expression Denial of Service (ReDoS) attacks. These changes aim to enhance security by avoiding deprecated methods and preventing user-supplied inputs from causing vulnerabilities.