fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857

.editorconfig

@@ -1,15 +0,0 @@
-# EditorConfig is awesome: https://EditorConfig.org
-
-# top-most EditorConfig file
-root = true
-
-[*]
-indent_style = space
-indent_size = 2
-end_of_line = lf
-charset = utf-8
-trim_trailing_whitespace = false
-insert_final_newline = false
-
-[pug.ts]
-indent_size = 4

.eslintrc.json

@@ -1,3 +0,0 @@
-{
-  "extends": ["prettier"]
-}

.gitignore

@@ -201,5 +201,3 @@ notes
 public/stylesheets/style.css
 ngrok
 .dccache
-
-.DS_store

.husky/.gitignore

@@ -1 +0,0 @@
-_

.husky/pre-commit

@@ -1,4 +0,0 @@
-#!/bin/sh
-. "$(dirname "$0")/_/husky.sh"
-
-npx lint-staged

.prettierrc.json

@@ -1,8 +0,0 @@
-{
-  "trailingComma": "es5",
-  "semi": true,
-  "tabWidth": 2,
-  "singleQuote": true,
-  "jsxSingleQuote": true,
-  "plugins": ["prettier-plugin-tailwindcss"]
-}

app.js

@@ -4,7 +4,7 @@ var path = require('path');
 var cookieParser = require('cookie-parser');
 var mLogger = require('morgan');
 var logger = require('./config/winston');
-const helmet = require('helmet');
+const helmet = require("helmet");
 
 var indexRouter = require('./routes/index');
 var aboutRouter = require('./routes/about');
@@ -12,8 +12,7 @@ var contactRouter = require('./routes/contact');
 
 var app = express();
 
-if (process.env.IS_DOCKER != 'true')
+if (process.env.IS_DOCKER != 'true') app.set('trust proxy', 'loopback,uniquelocal');
-  app.set('trust proxy', 'loopback,uniquelocal');
 app.disable('x-powered-by');
 
 // view engine setup
@@ -21,7 +20,7 @@ app.set('views', path.join(__dirname, 'views'));
 app.set('view engine', 'pug');
 
 if (process.env.NODE_ENV === 'production') {
-  app.use(mLogger('common', { stream: logger.stream }));
+    app.use(mLogger("common", { "stream": logger.stream }));
 } else {
     app.use(mLogger('dev'));
 }
@@ -31,32 +30,11 @@ app.use(
     helmet.contentSecurityPolicy({
       directives: {
         defaultSrc: ["'self'"],
-      scriptSrc: [
+        scriptSrc: ["'self'", "'unsafe-inline'", "'unsafe-eval'", "https://hcaptcha.com", "https://*.hcaptcha.com", "https://cdn.ravenjs.com/"],
-        "'self'",
+        imgSrc: ["'self'", "https://blog.pastel.codes", "https://static.ghost.org", "https://secure.gravatar.com"],
-        "'unsafe-inline'",
+        styleSrc: ["'self'", "'unsafe-inline'", "https://hcaptcha.com", "https://*.hcaptcha.com"],
-        "'unsafe-eval'",
+        fontSrc: ["'self'", "data:"],
-        'https://hcaptcha.com',
+        frameSrc: ["https://hcaptcha.com", "https://*.hcaptcha.com"],
-        'https://*.hcaptcha.com',
-        'https://cdn.ravenjs.com/',
-        'https://cdnjs.cloudflare.com/',
-        'https://cdn.jsdelivr.net/',
-        'https://*.cloudfront.net/',
-      ],
-      imgSrc: [
-        "'self'",
-        'https://blog.pastel.codes',
-        'https://static.ghost.org',
-        'https://secure.gravatar.com',
-        'data: ',
-      ],
-      styleSrc: [
-        "'self'",
-        "'unsafe-inline'",
-        'https://hcaptcha.com',
-        'https://*.hcaptcha.com',
-      ],
-      fontSrc: ["'self'", 'data:'],
-      frameSrc: ['https://hcaptcha.com', 'https://*.hcaptcha.com'],
         objectSrc: ["'none'"],
         upgradeInsecureRequests: [],
       },
@@ -67,7 +45,6 @@ app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
 app.use(cookieParser());
 app.use(express.static(path.join(__dirname, 'public')));
-app.use('/obsidian', express.static(path.join(__dirname, 'obsidian')));
 
 app.use('/', indexRouter);
 app.use('/about', aboutRouter);
@@ -79,14 +56,14 @@ app.use(function (req, res, next) {
 });
 
 // error handler
-app.use(function (err, req, res, _next) {
+app.use(function(err, req, res, next) {
     // set locals, only providing error in development
     res.locals.message = err.message;
     res.locals.error = req.app.get('env') === 'development' ? err : {};
 
     // render the error page
     res.status(err.status || 500);
-  res.render('error', { title: 'Error', description: 'Error' });
+    res.render('error', { title: 'Error', description: "Error" });
 });
 
 module.exports = app;

bin/www

@@ -59,7 +59,9 @@ function onError(error) {
         throw error;
     }
 
-  var bind = typeof port === 'string' ? 'Pipe ' + port : 'Port ' + port;
+    var bind = typeof port === 'string'
+        ? 'Pipe ' + port
+        : 'Port ' + port;
 
     // handle specific listen errors with friendly messages
     switch (error.code) {
@@ -82,6 +84,8 @@ function onError(error) {
 
 function onListening() {
     var addr = server.address();
-  var bind = typeof addr === 'string' ? 'pipe ' + addr : 'port ' + addr.port;
+    var bind = typeof addr === 'string'
+        ? 'pipe ' + addr
+        : 'port ' + addr.port;
     debug('Listening on ' + bind);
 }

config/winston.js

@@ -10,21 +10,21 @@ var logger = new winston.createLogger({
             json: true,
             maxsize: 5242880, //5MB
             maxFiles: 5,
-      colorize: false,
+            colorize: false
         }),
         new winston.transports.Console({
             level: 'debug',
             handleExceptions: true,
             json: false,
-      colorize: true,
+            colorize: true
-    }),
+        })
     ],
-  exitOnError: false,
+    exitOnError: false
 });
 
 logger.stream = {
-  write: function (message, _encoding) {
+    write: function(message, encoding){
         logger.info(message);
-  },
+    }
 };
-module.exports = logger;
+module.exports = logger

eslint.config.mjs

@@ -1,20 +0,0 @@
-import globals from 'globals';
-import pluginJs from '@eslint/js';
-
-export default [
-  { files: ['**/*.js'], languageOptions: { sourceType: 'commonjs' } },
-  { languageOptions: { globals: { ...globals.browser, ...globals.node } } },
-  pluginJs.configs.recommended,
-  {
-    rules: {
-      'no-unused-vars': [
-        'error',
-        {
-          argsIgnorePattern: '^_',
-          varsIgnorePattern: '^_',
-          caughtErrorsIgnorePattern: '^_',
-        },
-      ],
-    },
-  },
-];