Fixed exploits on vuejs-todo-single-file-component

samples/vuejs-todo-single-file-component/README.md

@@ -1,16 +1,16 @@
----
-page_type: sample
-products:
-- office-sp
-languages:
-- javascript
-- typescript
-extensions:
-  contentType: tools
-  technologies:
-  - SharePoint Framework
-  createdDate: 1/1/2016 12:00:00 AM
----
+---
+page_type: sample
+products:
+- office-sp
+languages:
+- javascript
+- typescript
+extensions:
+  contentType: tools
+  technologies:
+  - SharePoint Framework
+  createdDate: 1/1/2016 12:00:00 AM
+---
 # Todo Client Web Part built with Vue.js and Vue's single-file components
 
 ## Summary
@@ -18,7 +18,8 @@ extensions:
 Sample Todo web part demonstrating how you can utilize [Vue](https://vuejs.org/v2) (a progressive framework for building user interfaces) with SharePoint Framework using handy [single-file components](https://vuejs.org/v2/guide/single-file-components.html) approach. 
 
 ## Used SharePoint Framework Version
-![drop](https://img.shields.io/badge/drop-ga-green.svg)
+
+![1.4.0](https://img.shields.io/badge/drop-1.4.0-green.svg)
 
 ## Applies to
 
@@ -43,6 +44,7 @@ Version|Date|Comments
 0.0.6|December 11, 2018|Updated sample to SPFx 1.4 and Vue 2.5.x
 
 ## Disclaimer
+
 **THIS CODE IS PROVIDED *AS IS* WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR NON-INFRINGEMENT.**
 
 ---
@@ -66,4 +68,4 @@ Demonstrates\uses below features:
  - single-file components architecture for Vue.js
  - custom webpack loaders
 
- <img src="https://telemetry.sharepointpnp.com/sp-dev-fx-webparts/samples/vuejs-todo-single-file-component" />
+ <img src="https://telemetry.sharepointpnp.com/sp-dev-fx-webparts/samples/vuejs-todo-single-file-component" />

samples/vuejs-todo-single-file-component/package.json

@@ -14,7 +14,9 @@
     "vue": "^2.5.13",
     "vue-class-component": "^6.1.2",
     "vue-property-decorator": "^6.0.0",
-    "vue-template-compiler": "^2.5.13"
+    "vue-template-compiler": "^2.5.13",
+    "minimist": ">=1.2.3",
+    "acorn": ">=5.7.4"
   },
   "devDependencies": {
     "@microsoft/sp-build-web": "~1.4.0",