Security vulnerability serialize-javascript versions < 2.1.1

[jadeleeuw]

Currently we are using serialize-javascript versions below 2.1.1, which are considered to be a security risk. We do not use this dependency explicitly ourselves, but it is being pulled in by react-scripts. Upgrading the version of react-script to the lastest one moves most serialize-javascript versions used to >= 2.1.1, except for one, where it is only moved to version 2.1.0.

This happens because react-scripts uses webpack, which in turn uses create-react-app, which have not bumped the version of serialize-javascript they used yet. A ticket has already been filed for this here.

Once this ticket has been closed we should be able to bump our version react-scripts and no longer depend on any version of serialize-javascript below 2.1.1.