mozilla/node-convict — pull request #44 by seanmonstar (2014-10-29 19:10:49+00:00)
Title: update validator to 2.1.0

Because of http://nodesecurity.io/advisories/validator_XSS_Filter_Bypass_via_Encoded_URL

The 3.x versions is not backwards compatible, and requires a bit of refactoring to work with.