Use gulp-clean-css

Use gulp-clean-css instead of gulp-cssmin. This explicitly resolves WS-2019-0017. It also implicitly resolves CVE-2019-10744 because it removes lodash.template.
portegah85 · Oct 14, 2019 · cb315af · cb315af
1 parent 44f4471
commit cb315af
Show file tree

Hide file tree

Showing 4 changed files with 56 additions and 436 deletions.
diff --git a/Tailspin.SpaceGame.Web/wwwroot/css/site.min.css b/Tailspin.SpaceGame.Web/wwwroot/css/site.min.css
diff --git a/gulpfile.js b/gulpfile.js
@@ -4,7 +4,7 @@
 const gulp = require("gulp"),
  rimraf = require("rimraf"),
  concat = require("gulp-concat"),
- cssmin = require("gulp-cssmin"),
+ cleanCSS = require("gulp-clean-css"),
  uglify = require("gulp-uglify");
 
 const paths = {
@@ -32,7 +32,7 @@ gulp.task("min:js", () => {
 gulp.task("min:css", () => {
  return gulp.src([paths.css, "!" + paths.minCss])
  .pipe(concat(paths.concatCssDest))
- .pipe(cssmin())
+ .pipe(cleanCSS())
  .pipe(gulp.dest("."));
 });