[Snyk] Security upgrade ua-parser-js from 0.7.20 to 0.7.23

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-UAPARSERJS-1023599	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ua-parser-js

The new version differs by 70 commits.

• d5ab75a Merge branch 'master' of github.com:faisalman/ua-parser-js
• c7475db 0.7.23
• 83d37b4 Merge pull request Add rel noopener noreferrer to target='_blank' anchor elements (Fixes #439) mozilla/send#451 from dineshks1/master
• 2d53ceb Merge branch 'develop' of github.com:faisalman/ua-parser-js into develop
• d107155 Merge pull request Upload button doesn't look that great in Japanese locale mozilla/send#463 from vinyldarkscratch/bump-deps
• 43fb4d1 Merge pull request Continue to serve download page until after 24 hour expiry  mozilla/send#459 from WizKid/master
• 6d1f26d Fix ReDoS vulnerabilities reported by Snyk
• 86471ad Merge branch 'master' into develop
• 9dfa5fc Fix The Web Optimization Project has optimized your repository! mozilla/send#453 - ReDoS vulnerability in MachSpeed tablets detection as reported by @ migueldemoura
• 4547dbc Bump version for all dependencies
• 7b23335 Amazon Fire do not always contain build number
• da53c35 Adds travis jobs on ppc64le
• edd84ea Fix Fix #421 : Changed "Select a file on your computer" to "Select a file to upload" mozilla/send#447 - Improve identification for LG SmartTV
• 1a75bc8 Fix Chain jQuery calls, do not use events alias and store selectors mozilla/send#444 - Identify unknown Firefox-based browser as "Firefox" rather than "Mozilla"
• e72371c bump version to 0.7.22
• e96f958 Refine Xiaomi detection
• aa190ad Merge branch 'master' into develop
• 233d3ba Fix potential ReDoS vulnerability
• 3547f16 Merge pull request 'x-ua-compatible' header was not specified mozilla/send#437 from RomanSavarin/samsung-note-10
• da113f9 Merge branch 'develop' into samsung-note-10
• 150ad0b Merge pull request target="_blank" is missing 'rel' values 'noopener', 'noreferrer' mozilla/send#439 from joeyparrish/develop
• ba5324d Merge pull request The “width” attribute on the “th” element is obsolete. Use CSS instead mozilla/send#436 from derUli/develop
• 631d050 Merge pull request Object.entries polyfill for older browsers? mozilla/send#426 from nionata/feature/facebook
• 20ceaf9 Extract Chromecast firmware version

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic