Merge pull request #968 from dotnet-architecture/fix/npm-reported-vulnerabilities

Fix npm reported JS vulnerabilities

src/Web/WebSPA/appsettings.json

@@ -3,6 +3,9 @@
   "MarketingUrl": "http://localhost:5110",
   "CallBackUrl": "http://localhost:5104/",
   "PurchaseUrl": "http://localhost:5200",
+  "PurchaseUrlHC": "http://localhost:5202/hc",
+  "MarketingUrlHC": "http://localhost:5203/hc",
+  "IdentityUrlHC": "http://localhost:5105/hc",
   "UseCustomizationData": true,
   "IsClusterEnv": "False",
   "ActivateCampaignDetailFunction": false,

src/Web/WebSPA/package.json

@@ -50,10 +50,11 @@
     "preboot": "6.0.0-beta.5",
     "rxjs": "6.2.2",
     "webpack": "^4.17.1",
+    "webpack-dev-server": "3.1.14",
     "zone.js": "^0.8.26"
   },
   "devDependencies": {
-    "@angular-devkit/build-angular": "~0.7.0",
+    "@angular-devkit/build-angular": "~0.7.5",
     "@angular/cli": "^6.1.5",
     "@angular/compiler-cli": "6.1.4",
     "@types/core-js": "2.5.0",
@@ -63,6 +64,9 @@
     "@types/protractor": "4.0.0",
     "@types/selenium-webdriver": "3.0.10",
     "codelyzer": "~4.4.4",
+    "handlebars": "~4.0.13",
+    "lodash": "4.17.11",
+    "merge": "1.2.1",
     "sass-lint": "1.12.1",
     "ts-helpers": "1.1.2",
     "ts-node": "~7.0.1",

src/Web/WebSPA/web.config

@@ -1,14 +1,14 @@
 <?xml version="1.0" encoding="utf-8"?>
 <configuration>
-
   <!--
     Configure your application settings in appsettings.json. Learn more at https://go.microsoft.com/fwlink/?LinkId=786380
   -->
-
   <system.webServer>
     <handlers>
-      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified"/>
+      <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
     </handlers>
-    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="false"/>
+    <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="false">
+      <environmentVariables />
+    </aspNetCore>
   </system.webServer>
-</configuration>
+</configuration>