fix: remove mock-local-storage to address CVE on min-document (#1496)

Author: Antonio-Maranhao

app/core/utils.js

@@ -120,8 +120,8 @@ const utils = {
 
   localStorageGet: function (key) {
     let data;
-    if (_.has(window.localStorage, key)) {
-      data = window.localStorage[key];
+    if (window.localStorage.getItem(key) != null) {
+      data = window.localStorage.getItem(key);
       try {
         return JSON.parse(data);
       } catch (e) {

jest-setup.js

@@ -12,10 +12,27 @@
 
 require('jest');
 require('whatwg-fetch');
-require('mock-local-storage');
+
+function newMockLocalStorage() {
+  let store = {};
+  return {
+    getItem: (key) => {
+      return store[key] || null;
+    },
+    setItem: (key, value) => {
+      store[key] = String(value);
+    },
+    removeItem: (key) => {
+      delete store[key];
+    },
+    clear: () => {
+      store = {};
+    },
+  };
+}
 
 Object.defineProperty(window, 'localStorage', {
-  value: global.localStorage,
+  value: newMockLocalStorage(),
   configurable:true,
   enumerable:true,
   writable:true

package-lock.json

@@ -50,7 +50,6 @@
     "jest": "^29.3.1",
     "jest-environment-jsdom": "^29.3.1",
     "mini-css-extract-plugin": "^2.6.1",
-    "mock-local-storage": "^1.1.23",
     "nightwatch": "^3.12.0",
     "node-fetch": "^2.6.7",
     "redux-mock-store": "^1.5.4",