From 5a4fb5a8a66096ab74bdba26200908d6fed3c54f Mon Sep 17 00:00:00 2001
From: Ilya Kreymer <ikreymer@users.noreply.github.com>
Date: Thu, 4 Sep 2025 12:18:31 -0700
Subject: [PATCH] deps: update to wabac.js 2.23.11 for eval() rewriting fix +
 xss security fix on not found page (#448)

bump to 2.3.17
---
 CHANGES.md   |  4 ++++
 package.json |  4 ++--
 yarn.lock    | 18 +++++++++---------
 3 files changed, 15 insertions(+), 11 deletions(-)

diff --git a/CHANGES.md b/CHANGES.md
index 9004b29..5bfb4bb 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -2,6 +2,10 @@
 
 ## CHANGES
 
+v2.3.17
+- Security: Fix possible XSS issue in not found page via wabac.js 2.23.11
+- Fidelity: Fix possible eval() rewriting issue via wabac.js 2.23.10
+
 v2.3.16
 - Fidelity: Update to wabac.js 2.23.9 for various fidelity improvements
 
diff --git a/package.json b/package.json
index b517037..ab77d28 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "replaywebpage",
   "productName": "ReplayWeb.page",
-  "version": "2.3.16",
+  "version": "2.3.17",
   "description": "Serverless Web Archive Replay",
   "repository": "https://github.com/webrecorder/replayweb.page",
   "homepage": "https://replayweb.page/",
@@ -22,7 +22,7 @@
   "dependencies": {
     "@fortawesome/fontawesome-free": "^5.15.4",
     "@shoelace-style/shoelace": "~2.15.1",
-    "@webrecorder/wabac": "^2.23.9",
+    "@webrecorder/wabac": "^2.23.11",
     "bulma": "^0.9.3",
     "electron-log": "^4.4.1",
     "electron-updater": "^6.6.2",
diff --git a/yarn.lock b/yarn.lock
index 47790e6..59a4d31 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1080,10 +1080,10 @@
   resolved "https://registry.yarnpkg.com/@webpack-cli/serve/-/serve-2.0.5.tgz#325db42395cd49fe6c14057f9a900e427df8810e"
   integrity sha512-lqaoKnRYBdo1UgDX8uF24AfGMifWK19TxPmM5FHc2vAGxrJ/qtyUyFBWoY1tISZdelsQ5fBcOusifo5o5wSJxQ==
 
-"@webrecorder/wabac@^2.23.9":
-  version "2.23.9"
-  resolved "https://registry.yarnpkg.com/@webrecorder/wabac/-/wabac-2.23.9.tgz#23b74dc8404dfcf061888b439db4343e76b9e153"
-  integrity sha512-NUJx6dcnOpCSnhbFq6cAce8Cn3aHkA6HPNKuu14UrLLMWR3q8Of5TNOuX+ET+lf1UgMYS8AcQ/dR3j/CM4YcJw==
+"@webrecorder/wabac@^2.23.11":
+  version "2.23.11"
+  resolved "https://registry.yarnpkg.com/@webrecorder/wabac/-/wabac-2.23.11.tgz#945da06e08b6d093b525e6e5bfd6a8f17beb995b"
+  integrity sha512-rsBAkcYvgX+0HgwhgvSb3cBCBp0rVnHGQS/K5A9aJwOmfymHt0C2vInH/lmKV/5H38rJu29c2cvRX962h+lUiw==
   dependencies:
     "@peculiar/asn1-ecc" "^2.3.4"
     "@peculiar/asn1-schema" "^2.3.3"
@@ -1107,7 +1107,7 @@
     path-parser "^6.1.0"
     process "^0.11.10"
     stream-browserify "^3.0.0"
-    warcio "^2.4.3"
+    warcio "^2.4.5"
 
 "@webrecorder/wombat@^3.8.14":
   version "3.8.14"
@@ -6499,10 +6499,10 @@ warcio@^2.4.0:
     uuid-random "^1.3.2"
     yargs "^17.7.2"
 
-warcio@^2.4.3:
-  version "2.4.3"
-  resolved "https://registry.yarnpkg.com/warcio/-/warcio-2.4.3.tgz#37ff95c2358d0d5ddb16e924fe200c4774b3903d"
-  integrity sha512-c397HNfLE7yJsyVF3XKXB+Yh3q3WKljhdYRPkKF9eyZMtB+HIxj1aBqgq0nTYz492KMKtzygBo0Gx+Gi0fJ9dg==
+warcio@^2.4.5:
+  version "2.4.5"
+  resolved "https://registry.yarnpkg.com/warcio/-/warcio-2.4.5.tgz#ba39c38e433491ab9016282813b9cf6539c3d808"
+  integrity sha512-b6R/aIsR4fXzrpY/Zud7LqHFi2Bt8Ov5VLOnruHQ10rk129e9d0KOCZlyRmPD6ENTcV7yze5rXvJ5WSNS8R1zw==
   dependencies:
     "@types/pako" "^1.0.7"
     "@types/stream-buffers" "^3.0.7"