Skip to content

SYN-592: Remediate critical dependency findings #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
KARSE22 merged 4 commits into from
Aug 25, 2026
Merged

SYN-592: Remediate critical dependency findings #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
005d9aa
chore(deps): remediate SYN-592 critical findings
KARSE22 Aug 18, 2026
260cf42
chore(deps): keep transitive fixes in lockfile
KARSE22 Aug 19, 2026
454dde3
Build 2.2.4
KARSE22 Aug 25, 2026
1aae090
Update README CDN URLs to 2.2.4
KARSE22 Aug 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ Create an account at [Lob.com](https://dashboard.lob.com/#/register) to obtain a
Embed the Lob Address Elements script immediately before the closing <body> tag in the html containing your address form. The script will autodetect your form and its inputs.

```html
<script src="https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.js"
<script src="https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.js"
data-lob-key="live_pub_xxx"></script>
```
To view more configuration option see the [cheat sheet wiki](https://github.com/lob/address-elements/wiki/Script-Attribute-Reference-Sheet)
Expand All @@ -35,15 +35,15 @@ To view more configuration option see the [cheat sheet wiki](https://github.com/
E-commerce platforms like Shopify use predictable element names making them easy to extend. Paste the following preconfigured script into your top-level Shopify Plus template to add address verification to your checkout form. *Remember to replace `live_pub_xxx` with your Lob public key.*

```html
<script src="https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.merged.js"
<script src="https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.merged.js"
data-lob-key="live_pub_xxx"
data-lob-verify-value="strict"
data-lob-primary-value="false"
data-lob-err-bgcolor="#006eff"
data-lob-err-color="#ffffff"></script>

<!-- Here's another example that places the verification message above the submit/continue button at checkout. -->
<script src="https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.merged.js"
<script src="https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.merged.js"
data-lob-key="live_pub_xxx"
data-lob-verify-value="strict"
data-lob-primary-value="false"
Expand Down Expand Up @@ -85,7 +85,7 @@ class MyComponent extends React.Component {
// Place this inside the component containing your address form
componentDidMount() {
const script = document.createElement("script");
script.src = "https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.js";
script.src = "https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.js";
script.async = true;
script.setAttribute("data-lob-key", "live_pub_xxx");
document.body.appendChild(script);
Expand All @@ -101,7 +101,7 @@ const MyComponent = () => {
// Place this inside the component containing your address form
useEffect(() => {
const script = document.createElement("script");
script.src = "https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.js";
script.src = "https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.js";
script.async = true;
script.setAttribute("data-lob-key", "live_pub_xxx");
document.body.appendChild(script);
Expand All @@ -125,7 +125,7 @@ export default {
...
mounted() {
const script = document.createElement("script");
script.src = "https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.js";
script.src = "https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.js";
script.async = true;
script.setAttribute("data-lob-key", "live_pub_xxx");
document.body.appendChild(script);
Expand All @@ -146,7 +146,7 @@ With v2.0.0, when a script gets added to a page we search for inputs and labels
**In order to disable form detection you must provide the IDs to the address inputs in the AV elements script tag. Here is an example:**

```html
<script src="https://cdn.lob.com/lob/address-elements/2.2.1/address-elements.min.merged.js"
<script src="https://cdn.lob.com/lob/address-elements/2.2.4/address-elements.min.merged.js"
data-lob-key="live_pub_xxx"
data-lob-primary-id="address1"
data-lob-secondary-id="address2"
Expand Down Expand Up @@ -217,10 +217,10 @@ npm run build
## Latest Release


### 2.2.3 (CURRENT / LATEST)
### 2.2.4 (CURRENT / LATEST)
| Current Improvements |
| :--- |
| Removes Algolia/jQuery autocomplete dependency |suggestion
| Resolves critical dependency findings |


[See release notes for previous versions](https://github.com/lob/address-elements/wiki/Release-Notes)
Expand Down
2 changes: 2 additions & 0 deletions lib/address-elements-2.2.4.min.js
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions lib/address-elements-2.2.4.min.js.map
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion lib/address-elements.min.js
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion lib/address-elements.min.js.map
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions lib/address-elements.min.merged.js
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion lib/address-elements.min.merged.js.map
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion lib/merged-dependencies.js
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading