patternfly / patternfly/patternfly-react
"Disable Style Injection" wiki
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 862
- Forks
- 392
- Avg merge
- 4d 8h
- Merged PRs (30d)
- 9
Description
The wiki below describes using null-loader as the recommended solution to disable style injection for webpack.
https://github.com/patternfly/patternfly-react/wiki/Disabling-Style-Injection-with-Webpack
Unfortunately, Red Hat recently flagged loader-utils (a dependency of null-loader) as having a security issue.
"CVE-2022-37599 loader-utils: regular expression denial of service in interpolateName.js"
https://issues.redhat.com/browse/COST-3158
Note that the null-loader package has been deprecated and its repo archived.
https://github.com/webpack-contrib/null-loader
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the PatternFly wiki page “Disabling Style Injection with Webpack” and review its recommendation of null-loader, including the linked loader-utils CVE and archived package repository. Determine the current supported guidance for disabling style injection, then update the wiki so it no longer recommends the deprecated, affected dependency.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100