From 052be327d1b1e0d4918a3243330110fccf2f0f5c Mon Sep 17 00:00:00 2001
From: Ilya Kreymer <ikreymer@users.noreply.github.com>
Date: Tue, 29 Apr 2025 17:15:53 -0700
Subject: [PATCH] deps: update to wabac.js 2.22.14 (#415)

---
 CHANGES.md   |  3 ++-
 package.json |  2 +-
 yarn.lock    | 18 +++++++++---------
 3 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/CHANGES.md b/CHANGES.md
index 69b71b8..09e6fff 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -3,7 +3,8 @@
 ## CHANGES
 v2.3.5
 
-- Fidelity: Update to wabac.js 2.22.12, various fidelity improvements
+- Fidelity: Update to wabac.js 2.22.14, various fidelity improvements
+- Fidelity: Hardened CSP policy for all error pages, further prevent loading external origin from replay (via wabac.js 2.22.14)
 
 v2.3.4
 
diff --git a/package.json b/package.json
index 27c79f9..ebbc17b 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
   "dependencies": {
     "@fortawesome/fontawesome-free": "^5.15.4",
     "@shoelace-style/shoelace": "~2.15.1",
-    "@webrecorder/wabac": "^2.22.12",
+    "@webrecorder/wabac": "^2.22.14",
     "bulma": "^0.9.3",
     "electron-log": "^4.4.1",
     "electron-updater": "^6.3.9",
diff --git a/yarn.lock b/yarn.lock
index 48c733f..82a5b47 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1028,16 +1028,16 @@
   resolved "https://registry.yarnpkg.com/@webpack-cli/serve/-/serve-2.0.5.tgz#325db42395cd49fe6c14057f9a900e427df8810e"
   integrity sha512-lqaoKnRYBdo1UgDX8uF24AfGMifWK19TxPmM5FHc2vAGxrJ/qtyUyFBWoY1tISZdelsQ5fBcOusifo5o5wSJxQ==
 
-"@webrecorder/wabac@^2.22.12":
-  version "2.22.12"
-  resolved "https://registry.yarnpkg.com/@webrecorder/wabac/-/wabac-2.22.12.tgz#fe74bc13869d84f2318421379f13fc1f1bb44a20"
-  integrity sha512-s037RRNCin5fkouQgdkIoiw4KmoR7ECUG7dJXw5Q/mA6b+NuM950W0a5FZxPVxqwVJmZo+qDJLxlXnv5j7cuUQ==
+"@webrecorder/wabac@^2.22.14":
+  version "2.22.14"
+  resolved "https://registry.yarnpkg.com/@webrecorder/wabac/-/wabac-2.22.14.tgz#6f7503c2f06d126a1fb1ff754ce081836602e202"
+  integrity sha512-dcomAtul8dML/fJZjQNqRCWVLjirmuJPqPDNFv/7hFsm9SUHt9LdbXytQqndCWqCPvu6RVA4lfdXSA4O8erClQ==
   dependencies:
     "@peculiar/asn1-ecc" "^2.3.4"
     "@peculiar/asn1-schema" "^2.3.3"
     "@peculiar/x509" "^1.9.2"
     "@types/js-levenshtein" "^1.1.3"
-    "@webrecorder/wombat" "^3.8.10"
+    "@webrecorder/wombat" "^3.8.11"
     acorn "^8.10.0"
     auto-js-ipfs "^2.1.1"
     base64-js "^1.5.1"
@@ -1058,10 +1058,10 @@
     stream-browserify "^3.0.0"
     warcio "^2.4.3"
 
-"@webrecorder/wombat@^3.8.10":
-  version "3.8.10"
-  resolved "https://registry.yarnpkg.com/@webrecorder/wombat/-/wombat-3.8.10.tgz#b717d4ce6d01dbdfd38b91f500ebb574c245df93"
-  integrity sha512-BGq05d/7RKRe3H/gtqk/Mag8aQNuPngD3eAWE/81T6FhObldZtCD9UM6q3B0fRaEwEzZ/GLoTT6S6DrUuUxQGw==
+"@webrecorder/wombat@^3.8.11":
+  version "3.8.11"
+  resolved "https://registry.yarnpkg.com/@webrecorder/wombat/-/wombat-3.8.11.tgz#392a3a7003fdb41f5b214d4571d5f38f9978f2c8"
+  integrity sha512-Sg97woFtMFPh0PJ60WV9sze4nw5aPEq+BE9dFwdd6WpA45da0pkjCVX9z+YXejQLxdvKy24U9+rDPA9W6XqIGQ==
   dependencies:
     warcio "^2.4.0"