[Snyk] Upgrade pdfkit from 0.11.0 to 0.12.3

data/datacreator.ts

@@ -202,7 +202,7 @@ async function createRandomFakeUsers () {
     return text
   }
 
-  return Promise.all(new Array(config.get('application.numberOfRandomFakeUsers')).fill(0).map(
+  return await Promise.all(new Array(config.get('application.numberOfRandomFakeUsers')).fill(0).map(
     () => models.User.create({
       email: getGeneratedRandomFakeUserEmail(),
       password: makeRandomString(5)
@@ -258,7 +258,7 @@ async function createMemories () {
     })
   ]
 
-  return Promise.all(memories)
+  return await Promise.all(memories)
 }
 
 async function createProducts () {
@@ -305,7 +305,7 @@ async function createProducts () {
   }
   datacache.retrieveBlueprintChallengeFile = blueprint
 
-  return Promise.all(
+  return await Promise.all(
     products.map(
       ({ reviews = [], useForChristmasSpecialChallenge = false, urlForProductTamperingChallenge = false, fileForRetrieveBlueprintChallenge = false, ...product }) =>
         models.Product.create(product).catch(

lib/antiCheat.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import config = require('config')
 const colors = require('colors/safe')
 const logger = require('./logger')
-import config = require('config')
 
 const coupledChallenges = { // TODO prevent also near-identical challenges (e.g. all null byte file access or dom xss + bonus payload etc.) from counting as cheating
   loginAdminChallenge: ['weakPasswordChallenge'],

lib/startup/registerWebsocketEvents.ts

@@ -3,11 +3,11 @@
  * SPDX-License-Identifier: MIT
  */
 
+import config = require('config')
 const notifications = require('../../data/datacache').notifications
 const utils = require('../utils')
 const security = require('../insecurity')
 const challenges = require('../../data/datacache').challenges
-import config = require('config')
 let firstConnectedSocket = null
 
 const registerWebsocketEvents = (server) => {

lib/startup/validateDependencies.ts

@@ -3,14 +3,14 @@
  * SPDX-License-Identifier: MIT
  */
 
+import colors = require('colors/safe')
 try {
   require('check-dependencies')
 } catch (err) {
   console.error('Please run "npm install" before starting the application!')
   process.exit(1)
 }
 const logger = require('../logger')
-import colors = require('colors/safe')
 const dependencyChecker = require('check-dependencies')
 
 const validateDependencies = async ({ packageDir = '.', exitOnFailure = true } = {}) => {

models/feedback.ts

@@ -4,8 +4,8 @@
  */
 
 /* jslint node: true */
-const security = require('../lib/insecurity')
 import utils = require('../lib/utils')
+const security = require('../lib/insecurity')
 const challenges = require('../data/datacache').challenges
 
 module.exports = (sequelize, { STRING, INTEGER }) => {

models/user.ts

@@ -4,10 +4,10 @@
  */
 
 /* jslint node: true */
+import config = require('config')
 const security = require('../lib/insecurity')
 const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
-import config = require('config')
 
 module.exports = (sequelize, { STRING, BOOLEAN }) => {
   const User = sequelize.define('User', {

package.json

@@ -159,7 +159,7 @@
     "notevil": "^1.3.3",
     "on-finished": "^2.3.0",
     "otplib": "^12.0.1",
-    "pdfkit": "^0.11.0",
+    "pdfkit": "^0.12.3",
     "portscanner": "^2.2.0",
     "prom-client": "^12.0.0",
     "pug": "^3.0.0",

routes/2fa.ts

@@ -3,12 +3,12 @@
  * SPDX-License-Identifier: MIT
  */
 
+import config = require('config')
 const security = require('../lib/insecurity')
 const models = require('../models/index')
 const otplib = require('otplib')
 const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
-import config = require('config')
 
 otplib.authenticator.options = {
   // Accepts tokens as valid even when they are 30sec to old or to new

routes/appVersion.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const utils = require('../lib/utils')
 import config = require('config')
+const utils = require('../lib/utils')
 
 module.exports = function retrieveAppVersion () {
   return (req, res) => {

routes/authenticatedUsers.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 
 module.exports = function retrieveUserList () {
   return (req, res, next) => {

routes/b2bOrder.ts

@@ -3,10 +3,10 @@
  * SPDX-License-Identifier: MIT
  */
 
+import vm = require('vm')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
 const safeEval = require('notevil')
-import vm = require('vm')
 const challenges = require('../data/datacache').challenges
 
 module.exports = function b2bOrder () {

routes/basket.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 const challenges = require('../data/datacache').challenges
 
 module.exports = function retrieveBasket () {

routes/basketItems.ts

@@ -3,10 +3,10 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 
 module.exports.addBasketItem = function addBasketItem () {
   return (req, res, next) => {

routes/changePassword.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 const cache = require('../data/datacache')
 const challenges = cache.challenges
 

routes/chatbot.ts

@@ -3,13 +3,13 @@
  * SPDX-License-Identifier: MIT
  */
 
+import fs = require('fs')
 const { Bot } = require('juicy-chat-bot')
 const security = require('../lib/insecurity')
 const jwt = require('jsonwebtoken')
 const utils = require('../lib/utils')
 const botUtils = require('../lib/botUtils')
 const config = require('config')
-import fs = require('fs')
 const download = require('download')
 const models = require('../models/index')
 const challenges = require('../data/datacache').challenges

routes/coupon.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const security = require('../lib/insecurity')
 import models = require('../models/index')
+const security = require('../lib/insecurity')
 
 module.exports = function applyCoupon () {
   return ({ params }, res, next) => {

routes/currentUser.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const security = require('../lib/insecurity')
 import utils = require('../lib/utils')
+const security = require('../lib/insecurity')
 const cache = require('../data/datacache')
 const challenges = cache.challenges
 

routes/dataExport.ts

@@ -3,11 +3,11 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
 const db = require('../data/mongodb')
 const challenges = require('../data/datacache').challenges
-import models = require('../models/index')
 
 module.exports = function dataExport () {
   return async (req, res, next) => {

routes/fileUpload.ts

@@ -3,12 +3,12 @@
  * SPDX-License-Identifier: MIT
  */
 
+import fs = require('fs')
 const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
 const libxml = require('libxmljs2')
 const os = require('os')
 const vm = require('vm')
-import fs = require('fs')
 const unzipper = require('unzipper')
 const path = require('path')
 

routes/imageCaptcha.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const svgCaptcha = require('svg-captcha')
 import models = require('../models/index')
+const svgCaptcha = require('svg-captcha')
 const Op = models.Sequelize.Op
 const security = require('../lib/insecurity')
 

routes/login.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 const challenges = require('../data/datacache').challenges
 const users = require('../data/datacache').users
 const config = require('config')

routes/metrics.ts

@@ -3,6 +3,7 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const Prometheus = require('prom-client')
 const onFinished = require('on-finished')
 const orders = require('../data/mongodb').orders
@@ -11,7 +12,6 @@ const challenges = require('../data/datacache').challenges
 const utils = require('../lib/utils')
 const antiCheat = require('../lib/antiCheat')
 const config = require('config')
-import models = require('../models/index')
 const Op = models.Sequelize.Op
 
 const register = Prometheus.register

routes/orderHistory.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const security = require('../lib/insecurity')
 import db = require('../data/mongodb')
+const security = require('../lib/insecurity')
 
 module.exports.orderHistory = function orderHistory () {
   return async (req, res, next) => {

routes/profileImageFileUpload.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const utils = require('../lib/utils')
 import fs = require('fs')
+const utils = require('../lib/utils')
 const models = require('../models/index')
 const security = require('../lib/insecurity')
 const logger = require('../lib/logger')

routes/resetPassword.ts

@@ -3,12 +3,12 @@
  * SPDX-License-Identifier: MIT
  */
 
+import config = require('config')
 const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
 const users = require('../data/datacache').users
 const security = require('../lib/insecurity')
 const models = require('../models/index')
-import config = require('config')
 
 module.exports = function resetPassword () {
   return ({ body, connection }, res, next) => {

routes/saveLoginIp.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
-import models = require('../models/index')
 const cache = require('../data/datacache')
 const challenges = cache.challenges
 

routes/search.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const utils = require('../lib/utils')
 import models = require('../models/index')
+const utils = require('../lib/utils')
 const challenges = require('../data/datacache').challenges
 
 // vuln-code-snippet start unionSqlInjectionChallenge dbSchemaChallenge

routes/verify.ts

@@ -3,11 +3,11 @@
  * SPDX-License-Identifier: MIT
  */
 
+import models = require('../models/index')
 const utils = require('../lib/utils')
 const security = require('../lib/insecurity')
 const jwt = require('jsonwebtoken')
 const jws = require('jws')
-import models = require('../models/index')
 const cache = require('../data/datacache')
 const Op = models.Sequelize.Op
 const challenges = cache.challenges

server.ts

@@ -3,9 +3,9 @@
  * SPDX-License-Identifier: MIT
  */
 import dataErasure from './routes/dataErasure'
+import fs = require('fs')
 const startTime = Date.now()
 const path = require('path')
-import fs = require('fs')
 const morgan = require('morgan')
 const colors = require('colors/safe')
 const finale = require('finale-rest')

test/api/chatBotSpec.ts

@@ -236,7 +236,7 @@ describe('/chatbot', () => {
       })
       const testCommand = functionTest[0].utterances[0]
       const testResponse = '3be2e438b7f3d04c89d7749f727bb3bd'
-      return frisby.setup({
+      return await frisby.setup({
         request: {
           headers: {
             Authorization: `Bearer ${token}`,

test/e2e/basketSpec.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const security = require('../../lib/insecurity')
 import config = require('config')
+const security = require('../../lib/insecurity')
 const models = require('../../models/index')
 
 describe('/#/basket', () => {

test/e2e/complainSpec.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const config = require('config')
 import path = require('path')
+const config = require('config')
 const utils = require('../../lib/utils')
 
 describe('/#/complain', () => {

test/e2e/deluxeSpec.ts

@@ -3,8 +3,8 @@
  * SPDX-License-Identifier: MIT
  */
 
-const config = require('config')
 import request = require('request')
+const config = require('config')
 
 describe('/#/deluxe-membership', () => {
   describe('challenge "svgInjection"', () => {