Merge pull request #19 from voc0der/feature/dependabot-findings

Initial Dependabot remediation pass

backend/package.json

@@ -28,28 +28,29 @@
     "archiver": "^5.3.1",
     "async": "^3.2.3",
     "async-mutex": "^0.4.0",
-    "axios": "^0.21.2",
+    "axios": "^1.13.5",
     "bcryptjs": "^2.4.0",
+    "body-parser": "^1.20.4",
     "command-exists": "^1.2.9",
-    "compression": "^1.7.4",
+    "compression": "^1.8.1",
     "config": "^3.2.3",
     "execa": "^5.1.1",
-    "express": "^4.18.2",
+    "express": "^4.22.1",
     "express-rate-limit": "^6.11.2",
-    "express-session": "^1.17.3",
+    "express-session": "^1.19.0",
     "feed": "^4.2.2",
     "fluent-ffmpeg": "^2.1.2",
     "fs-extra": "^9.0.0",
     "gotify": "^1.1.0",
-    "jsonwebtoken": "^9.0.0",
-    "lodash": "^4.17.21",
+    "jsonwebtoken": "^9.0.3",
+    "lodash": "^4.17.23",
     "lowdb": "^1.0.0",
     "md5": "^2.2.1",
     "mocha": "^9.2.2",
     "moment": "^2.29.4",
     "mongodb": "^3.6.9",
-    "multer": "1.4.5-lts.1",
-    "node-fetch": "^2.6.7",
+    "multer": "^2.0.2",
+    "node-fetch": "^2.7.0",
     "node-id3": "^0.2.6",
     "node-schedule": "^2.1.0",
     "node-telegram-bot-api": "^0.61.0",

package.json

@@ -38,13 +38,13 @@
     "@ngneat/content-loader": "^7.0.0",
     "@videogular/ngx-videogular": "^6.0.0",
     "core-js": "^2.4.1",
-    "crypto-js": "^4.1.1",
+    "crypto-js": "^4.2.0",
     "file-saver": "^2.0.2",
     "filesize": "^10.0.7",
     "fs-extra": "^10.0.0",
     "material-icons": "^1.10.8",
     "nan": "^2.14.1",
-    "ngx-avatars": "^1.4.1",
+    "ngx-avatars": "1.4.1",
     "ngx-file-drop": "^15.0.0",
     "rxjs": "^6.6.3",
     "rxjs-compat": "^6.6.7",
@@ -74,7 +74,7 @@
     "karma-cli": "~1.0.1",
     "karma-coverage-istanbul-reporter": "~3.0.2",
     "karma-jasmine": "~5.1.0",
-    "karma-jasmine-html-reporter": "^1.5.0",
+    "karma-jasmine-html-reporter": "1.5.4",
     "openapi-typescript-codegen": "^0.23.0",
     "protractor": "~7.0.0",
     "ts-node": "~3.0.4",
@@ -82,8 +82,8 @@
   },
   "overrides": {
     "ngx-avatars": {
-      "@angular/common": "15.0.1",
-      "@angular/core": "15.0.1"
+      "@angular/common": "15.2.10",
+      "@angular/core": "15.2.10"
     }
-}
+  }
 }

src/app/components/archive-viewer/archive-viewer.component.ts

@@ -7,6 +7,7 @@ import { FileType } from 'api-types';
 import { Archive } from 'api-types/models/Archive';
 import { ConfirmDialogComponent } from 'app/dialogs/confirm-dialog/confirm-dialog.component';
 import { PostsService } from 'app/posts.services';
+import { saveAs } from 'file-saver';
 import { NgxFileDropEntry } from 'ngx-file-drop';
 
 @Component({

src/app/components/custom-playlists/custom-playlists.component.ts

@@ -4,6 +4,7 @@ import { Router } from '@angular/router';
 import { MatDialog } from '@angular/material/dialog';
 import { CreatePlaylistComponent } from 'app/create-playlist/create-playlist.component';
 import { Playlist } from 'api-types';
+import { saveAs } from 'file-saver';
 
 @Component({
   selector: 'app-custom-playlists',

src/app/components/recent-videos/recent-videos.component.ts

@@ -8,6 +8,7 @@ import { distinctUntilChanged } from 'rxjs/operators';
 import { CdkDragDrop, moveItemInArray } from '@angular/cdk/drag-drop';
 import { MatChipListboxChange } from '@angular/material/chips';
 import { MatSelectionListChange } from '@angular/material/list';
+import { saveAs } from 'file-saver';
 
 @Component({
   selector: 'app-recent-videos',
@@ -379,9 +380,10 @@ export class RecentVideosComponent implements OnInit {
   }
 
   fileSelectionChanged(event: MatSelectionListChange): void {
-    // TODO: make sure below line is possible (_selected is private)
-    const adding = event.option['_selected'];
-    const value = event.option.value;
+    const option = event.options?.[0];
+    if (!option) return;
+    const adding = option.selected;
+    const value = option.value;
     if (adding) {
       this.selected_data.push(value.uid);
       this.selected_data_objs.push(value);

src/app/dialogs/subscription-info-dialog/subscription-info-dialog.component.ts

@@ -3,6 +3,7 @@ import { MatDialog, MatDialogRef, MAT_DIALOG_DATA } from '@angular/material/dial
 import { PostsService } from 'app/posts.services';
 import { ConfirmDialogComponent } from '../confirm-dialog/confirm-dialog.component';
 import { Subscription } from 'api-types';
+import { saveAs } from 'file-saver';
 
 @Component({
   selector: 'app-subscription-info-dialog',

src/app/player/player.component.ts

@@ -8,6 +8,7 @@ import { ShareMediaDialogComponent } from '../dialogs/share-media-dialog/share-m
 import { DatabaseFile, FileType, Playlist } from '../../api-types';
 import { TwitchChatComponent } from 'app/components/twitch-chat/twitch-chat.component';
 import { VideoInfoDialogComponent } from 'app/dialogs/video-info-dialog/video-info-dialog.component';
+import { saveAs } from 'file-saver';
 
 export interface IMedia {
   title: string;

src/app/subscription/subscription/subscription.component.ts

@@ -4,6 +4,7 @@ import { ActivatedRoute, Router, ParamMap } from '@angular/router';
 import { MatDialog } from '@angular/material/dialog';
 import { EditSubscriptionDialogComponent } from 'app/dialogs/edit-subscription-dialog/edit-subscription-dialog.component';
 import { Subscription } from 'api-types';
+import { saveAs } from 'file-saver';
 
 @Component({
   selector: 'app-subscription',