In attempting to comply with CVE-2020-36048, forcing engine.io to resolve to ^4.0.0 results in the following error:
Option heartbeat interval is not valid. Please refer to the README.
I don't see the removal of the heartbeat interval option called out in the enginge.io CHANGELOG, but there is this blog post about the engine.io 4 release (now on 6.1.2).
| Browsersync |
Node |
Npm |
| 2.27.7 |
4.18.3 |
6.14.15 |
Usage
gulp.task('watch', function() {
browserSync.init({
socket: {
domain: 'myapp-sync.lndo.site'
},
logLevel: 'silent',
notify: false,
cors: true,
server: {
baseDir: '.',
},
open: false,
});
...
});
In attempting to comply with CVE-2020-36048, forcing
engine.ioto resolve to^4.0.0results in the following error:I don't see the removal of the
heartbeat intervaloption called out in theenginge.ioCHANGELOG, but there is this blog post about the engine.io 4 release (now on 6.1.2).Usage