The quran from fawazahmed0

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.7

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.7 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

ini:1.3.7 is a transitive dependency introduced by the following direct dependency(s):

• workbox-cli:6.5.3
        └─ update-notifier:4.1.3
              └─ is-installed-globally:0.3.2
                    └─ global-dirs:2.1.0
                          └─ ini:1.3.7
              └─ latest-version:5.1.0
                    └─ package-json:6.5.0
                          └─ registry-auth-token:4.2.2
                                └─ rc:1.2.8
                                      └─ ini:1.3.7

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 4.3) Vulnerability due to usage of bl:4.1.0

Vulnerabilities

DepShield reports that this application's usage of bl:4.1.0 results in the following vulnerability(s):

(CVSS 4.3) CWE-200: Information Exposure

Occurrences

bl:4.1.0 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/reporter-cli:2.0.1
              └─ ora:5.4.1
                    └─ bl:4.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

URL to set edition (30mins) - could

add newer noto sans arabic font in qapi & use that in sites

use bleeding edge variant from https://github.com/googlefonts/noto-source

Add spinning wheel - could

change trans based on option selected - must

[DepShield] (CVSS 7.5) Vulnerability due to usage of merge:1.2.1

Vulnerabilities

DepShield reports that this application's usage of merge:1.2.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

merge:1.2.1 is a transitive dependency introduced by the following direct dependency(s):

• watch:1.0.2
└─ exec-sh:0.2.2
└─ merge:1.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Retrospective

audio books

reading & clean up & subdivide & sort & timebox & deadline

must khatab (eng to all other language translation(goog trans)
voice mp3 (on youtube/ github for download) (for machine simple & originals)
latin gen(optional)
check for mistakes
audiobook at libgen
listen translation in islm projs, with links to libgen audiobooks & pdf , verse be verse and chap by chap, low quality i.e less than file upload limit
Option to play audio on site
Store chap mp3 at nft.storage and fetch using cloudflare ipfs
maybe using github actions/ other proxy to generate each trans (& it's audio) (audio for all avaialbe trans & english)

create static pages for quran translation for seo

Add to home screen (10mins) - should

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.camelcase:4.3.0

Vulnerabilities

DepShield reports that this application's usage of lodash.camelcase:4.3.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.camelcase:4.3.0 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/transformer-postcss:2.0.1
                    └─ postcss-modules:3.2.2
                          └─ lodash.camelcase:4.3.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.uniq:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/optimizer-cssnano:2.0.1
                    └─ cssnano:5.0.14
                          └─ cssnano-preset-default:5.1.9
                                └─ postcss-colormin:5.2.2
                                      └─ caniuse-api:3.0.0
                                            └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

bump to bootstrap beta in all projects

dawah vids with monetization with multiple langs , hardcoded & normal subtitles

SEO
Zk Nk Videos

Add good features from here to askGod & integrate both

fix min json issue for specific file - won't have (wait and see)

if doens't work, then use .json isntead of min.json

Google noto fonts issues

check issues in notosans arabic latest version & raise issue in google noto repository
Also unicode 14 will release on 14-sept-21 , can check for other scripts too
Make it easy to file issue, other wise it will consume huge time

Raise only important/practical issues

fix anchor scroll issue: https://stackoverflow.com/questions/10732690/offsetting-an-html-anchor-to-adjust-for-fixed-header - must

optimize by fetching only chap, and adding ver effciently (use classes) - should

Add donate/share button (15mins) - should

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.clone:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.clone:4.5.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.clone:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/transformer-babel:2.0.1
                    └─ @parcel/babel-ast-utils:2.0.1
                          └─ @parcel/babylon-walk:2.0.1
                                └─ lodash.clone:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

seo for fawazahmed0.github.io

make sure the all the project such as fawazahmed0.github.io/quran etc can be searched in google, maybe by adding sitemap or something

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/reporter-dev-server:2.0.1
              └─ connect:3.7.0
                    └─ debug:2.6.9
                    └─ finalhandler:1.1.2
                          └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

release quran apps with single translation name

one app for one language to seo

pwa in playstore & amazon appstore &app store

Also for other projects like askgod etc

[DepShield] (CVSS 7.5) Vulnerability due to usage of postcss:6.0.1

Vulnerabilities

DepShield reports that this application's usage of postcss:6.0.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 5.3) [CVE-2021-23382] The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of...

Occurrences

postcss:6.0.1 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/transformer-postcss:2.0.1
                    └─ css-modules-loader-core:1.1.0
                          └─ postcss:6.0.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

letter with projs & jb

Projects completed, projects to do and jb
Read To future.txt

Renewed PR of Quran related projects

like playstore apps etc

cookies to remember settings (1hr) - must

Little doc about website link etc(10mins) - could

[DepShield] (CVSS 7.5) Vulnerability due to usage of http-proxy:1.18.1

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/reporter-dev-server:2.0.1
              └─ http-proxy-middleware:1.3.1
                    └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Add chapter with names (https://raw.githubusercontent.com/fawazahmed0/quran-api/1/info.min.json) - should

Integrate all Quran related projects

Quran releated projects

For example , have youtube link in Quran tranlslation website

have links in quran videos description to quran website

also some way integrate askgod into above projects

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.sortby:4.7.0

Vulnerabilities

DepShield reports that this application's usage of lodash.sortby:4.7.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash.sortby:4.7.0 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/optimizer-htmlnano:2.0.1
                    └─ htmlnano:1.1.1
                          └─ uncss:0.17.3
                                └─ jsdom:14.1.0
                                      └─ whatwg-url:7.1.0
                                            └─ lodash.sortby:4.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Add tooltip to indicate the edition-language or I info button etc - could

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.debounce:4.0.8

Depshield will be deprecated soon

Please install our new product, Sonatype Lift with advanced features

Vulnerabilities

DepShield reports that this application's usage of lodash.debounce:4.0.8 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.debounce:4.0.8 is a transitive dependency introduced by the following direct dependency(s):

• workbox-cli:6.5.3
        └─ workbox-build:6.5.3
              └─ @babel/preset-env:7.18.6
                    └─ babel-plugin-polyfill-corejs2:0.3.1
                          └─ @babel/helper-define-polyfill-provider:0.3.1
                                └─ lodash.debounce:4.0.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.memoize:4.1.2

Vulnerabilities

DepShield reports that this application's usage of lodash.memoize:4.1.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.memoize:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/optimizer-cssnano:2.0.1
                    └─ cssnano:5.0.14
                          └─ cssnano-preset-default:5.1.9
                                └─ postcss-colormin:5.2.2
                                      └─ caniuse-api:3.0.0
                                            └─ lodash.memoize:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

increase text size option (zoom in /out option /symbol) (30mins) could

remember text size in cookie

[DepShield] (CVSS 7.5) Vulnerability due to usage of postcss:6.0.23

Vulnerabilities

DepShield reports that this application's usage of postcss:6.0.23 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')
(CVSS 5.3) [CVE-2021-23382] The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of...

Occurrences

postcss:6.0.23 is a transitive dependency introduced by the following direct dependency(s):

• parcel:2.0.1
        └─ @parcel/config-default:2.0.1
              └─ @parcel/transformer-postcss:2.0.1
                    └─ css-modules-loader-core:1.1.0
                          └─ postcss-modules-extract-imports:1.1.0
                                └─ postcss:6.0.23
                          └─ postcss-modules-local-by-default:1.2.0
                                └─ postcss:6.0.23
                          └─ postcss-modules-scope:1.1.0
                                └─ postcss:6.0.23
                          └─ postcss-modules-values:1.3.0
                                └─ postcss:6.0.23

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Changing chapter in link doesn't seem to work

Steps to reproduce bug:

Go to https://fawazahmed0.github.io/quran/#13:27
Now in the same tab go to https://fawazahmed0.github.io/quran/#14:27
You will notice, the chapter doesn't change
using https://fawazahmed0.github.io/quran#14:27 link works fine

Planning Phase

estm time : 90mins
Time taken: 40mins

imp issues to be fixed:

Spinner: https://github.com/fawazahmed0/askgod/issues/37 (estm: 30mins ,time take: 50mins)
mir org: create a org trans in qapi to avoid misunderstands (change checkduplicate to true) (15mins) (timetaken 8mins)
CI breaking: https://github.com/fawazahmed0/askgod/issues/38 (update cron & noofQues) (45mins) (timetaken 15mins)

read/demo site with integration:
UI:

Not now:

feature using reddit : https://github.com/fawazahmed0/askgod/issues/39 (1hr)

Estm: 570mins
With buffer : 670mins (11hrs) 07-12-20

option to go specific ver using url & also indicate url on verse change (#5:1) (eg: chap 5 selected show, #5:1) (1hrs) should

#5 means just chap

fawazahmed0 / quran Goto Github PK

quran's Introduction

Quran

Usage:

How it works:

Share:

quran's People

Contributors

Stargazers

Watchers

Forkers

quran's Issues

Depshield will be deprecated soon

Depshield will be deprecated soon

Recommend Projects

Recommend Topics

Recommend Org

Jobs