From 0861360ac16fac5a293bf224e7a6b476c403a569 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 4 Sep 2021 01:23:58 +0000
Subject: [PATCH] fix: systemvm/agent/noVNC/package.json &
 systemvm/agent/noVNC/.snyk to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:ms:20170412


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/npm:ms:20170412
---
 systemvm/agent/noVNC/.snyk        | 11 +++++++++++
 systemvm/agent/noVNC/package.json | 12 ++++++++----
 2 files changed, 19 insertions(+), 4 deletions(-)
 create mode 100644 systemvm/agent/noVNC/.snyk

diff --git a/systemvm/agent/noVNC/.snyk b/systemvm/agent/noVNC/.snyk
new file mode 100644
index 000000000000..88baf306d069
--- /dev/null
+++ b/systemvm/agent/noVNC/.snyk
@@ -0,0 +1,11 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.21.5
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:debug:20170905':
+    - karma > socket.io > socket.io-adapter > socket.io-parser > debug:
+        patched: '2021-09-04T01:23:56.029Z'
+  'npm:ms:20170412':
+    - karma > socket.io > socket.io-adapter > socket.io-parser > debug > ms:
+        patched: '2021-09-04T01:23:56.029Z'
diff --git a/systemvm/agent/noVNC/package.json b/systemvm/agent/noVNC/package.json
index 2d84a5f38e5f..64527dede302 100644
--- a/systemvm/agent/noVNC/package.json
+++ b/systemvm/agent/noVNC/package.json
@@ -21,7 +21,8 @@
   "scripts": {
     "lint": "eslint app core po tests utils",
     "test": "karma start karma.conf.js",
-    "prepublish": "node ./utils/use_require.js --as commonjs --clean"
+    "prepublish": "npm run snyk-protect && node ./utils/use_require.js --as commonjs --clean",
+    "snyk-protect": "snyk-protect"
   },
   "repository": {
     "type": "git",
@@ -57,7 +58,7 @@
     "eslint": "^4.16.0",
     "fs-extra": "^1.0.0",
     "jsdom": "*",
-    "karma": "^1.3.0",
+    "karma": "^2.0.0",
     "karma-mocha": "^1.3.0",
     "karma-mocha-reporter": "^2.2.0",
     "karma-sauce-launcher": "^1.0.0",
@@ -71,11 +72,14 @@
     "sinon": "^4.0.0",
     "sinon-chai": "^2.8.0"
   },
-  "dependencies": {},
+  "dependencies": {
+    "@snyk/protect": "latest"
+  },
   "keywords": [
     "vnc",
     "rfb",
     "novnc",
     "websockify"
-  ]
+  ],
+  "snyk": true
 }