@aws-sdk/xml-builder - npm Package Compare versions

Comparing version 3.972.20 to 3.972.21

dist-cjs/xml-external/nodable_entities.js

+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EntityDecoderImpl = exports.CURRENCY = exports.COMMON_HTML = exports.XML = void 0;
+exports.XML = {
+    amp: "&",
+    apos: "'",
+    gt: ">",
+    lt: "<",
+    quot: '"',
+};
+exports.COMMON_HTML = {
+    nbsp: "\u00a0",
+    copy: "\u00a9",
+    reg: "\u00ae",
+    trade: "\u2122",
+    mdash: "\u2014",
+    ndash: "\u2013",
+    hellip: "\u2026",
+    laquo: "\u00ab",
+    raquo: "\u00bb",
+    lsquo: "\u2018",
+    rsquo: "\u2019",
+    ldquo: "\u201c",
+    rdquo: "\u201d",
+    bull: "\u2022",
+    para: "\u00b6",
+    sect: "\u00a7",
+    deg: "\u00b0",
+    frac12: "\u00bd",
+    frac14: "\u00bc",
+    frac34: "\u00be",
+};
+exports.CURRENCY = {
+    cent: "\u00a2",
+    pound: "\u00a3",
+    curren: "\u00a4",
+    yen: "\u00a5",
+    euro: "\u20ac",
+    dollar: "$",
+    fnof: "\u0192",
+    inr: "\u20b9",
+    af: "\u060b",
+    birr: "\u1265\u122d",
+    peso: "\u20b1",
+    rub: "\u20bd",
+    won: "\u20a9",
+    yuan: "\u00a5",
+    cedil: "\u00b8",
+};
+const SPECIAL_CHARS = new Set("!?\\/[]$%{}^&*()<>|+");
+function validateEntityName(name) {
+    if (name[0] === "#") {
+        throw new Error(`[EntityReplacer] Invalid character '#' in entity name: "${name}"`);
+    }
+    for (const ch of name) {
+        if (SPECIAL_CHARS.has(ch)) {
+            throw new Error(`[EntityReplacer] Invalid character '${ch}' in entity name: "${name}"`);
+        }
+    }
+    return name;
+}
+function mergeEntityMaps(...maps) {
+    const out = Object.create(null);
+    for (const map of maps) {
+        if (!map) {
+            continue;
+        }
+        for (const key of Object.keys(map)) {
+            const raw = map[key];
+            if (typeof raw === "string") {
+                out[key] = raw;
+            }
+            else if (raw && typeof raw === "object" && raw.val !== undefined) {
+                const val = raw.val;
+                if (typeof val === "string") {
+                    out[key] = val;
+                }
+            }
+        }
+    }
+    return out;
+}
+const LIMIT_TIER_EXTERNAL = "external";
+const LIMIT_TIER_BASE = "base";
+const LIMIT_TIER_ALL = "all";
+function parseLimitTiers(raw) {
+    if (!raw || raw === LIMIT_TIER_EXTERNAL) {
+        return new Set([LIMIT_TIER_EXTERNAL]);
+    }
+    if (raw === LIMIT_TIER_ALL) {
+        return new Set([LIMIT_TIER_ALL]);
+    }
+    if (raw === LIMIT_TIER_BASE) {
+        return new Set([LIMIT_TIER_BASE]);
+    }
+    if (Array.isArray(raw)) {
+        return new Set(raw);
+    }
+    return new Set([LIMIT_TIER_EXTERNAL]);
+}
+const NCR_LEVEL = Object.freeze({ allow: 0, leave: 1, remove: 2, throw: 3 });
+const XML10_ALLOWED_C0 = new Set([0x09, 0x0a, 0x0d]);
+function parseNCRConfig(ncr) {
+    if (!ncr) {
+        return { xmlVersion: 1.0, onLevel: NCR_LEVEL.allow, nullLevel: NCR_LEVEL.remove };
+    }
+    const xmlVersion = ncr.xmlVersion === 1.1 ? 1.1 : 1.0;
+    const onLevel = NCR_LEVEL[ncr.onNCR ?? "allow"] ?? NCR_LEVEL.allow;
+    const nullLevel = NCR_LEVEL[ncr.nullNCR ?? "remove"] ?? NCR_LEVEL.remove;
+    const clampedNull = Math.max(nullLevel, NCR_LEVEL.remove);
+    return { xmlVersion, onLevel, nullLevel: clampedNull };
+}
+const EntityDecoderImpl = class EntityDecoderImpl {
+    _limit;
+    _maxTotalExpansions;
+    _maxExpandedLength;
+    _postCheck;
+    _limitTiers;
+    _numericAllowed;
+    _baseMap;
+    _externalMap;
+    _inputMap;
+    _totalExpansions;
+    _expandedLength;
+    _removeSet;
+    _leaveSet;
+    _ncrXmlVersion;
+    _ncrOnLevel;
+    _ncrNullLevel;
+    constructor(options = {}) {
+        this._limit = options.limit || {};
+        this._maxTotalExpansions = this._limit.maxTotalExpansions || 0;
+        this._maxExpandedLength = this._limit.maxExpandedLength || 0;
+        this._postCheck = typeof options.postCheck === "function" ? options.postCheck : (r) => r;
+        this._limitTiers = parseLimitTiers(this._limit.applyLimitsTo ?? LIMIT_TIER_EXTERNAL);
+        this._numericAllowed = options.numericAllowed ?? true;
+        this._baseMap = mergeEntityMaps(exports.XML, options.namedEntities || null);
+        this._externalMap = Object.create(null);
+        this._inputMap = Object.create(null);
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        this._removeSet = new Set(options.remove && Array.isArray(options.remove) ? options.remove : []);
+        this._leaveSet = new Set(options.leave && Array.isArray(options.leave) ? options.leave : []);
+        const ncrCfg = parseNCRConfig(options.ncr);
+        this._ncrXmlVersion = ncrCfg.xmlVersion;
+        this._ncrOnLevel = ncrCfg.onLevel;
+        this._ncrNullLevel = ncrCfg.nullLevel;
+    }
+    setExternalEntities(map) {
+        if (map) {
+            for (const key of Object.keys(map)) {
+                validateEntityName(key);
+            }
+        }
+        this._externalMap = mergeEntityMaps(map);
+    }
+    addExternalEntity(key, value) {
+        validateEntityName(key);
+        if (typeof value === "string" && value.indexOf("&") === -1) {
+            this._externalMap[key] = value;
+        }
+    }
+    addInputEntities(map) {
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        this._inputMap = mergeEntityMaps(map);
+    }
+    reset() {
+        this._inputMap = Object.create(null);
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        return this;
+    }
+    setXmlVersion(version) {
+        this._ncrXmlVersion = version === "1.1" || version === 1.1 ? 1.1 : 1.0;
+    }
+    decode(str) {
+        if (typeof str !== "string" || str.length === 0) {
+            return str;
+        }
+        const original = str;
+        const chunks = [];
+        const len = str.length;
+        let last = 0;
+        let i = 0;
+        const limitExpansions = this._maxTotalExpansions > 0;
+        const limitLength = this._maxExpandedLength > 0;
+        const checkLimits = limitExpansions || limitLength;
+        while (i < len) {
+            if (str.charCodeAt(i) !== 38) {
+                i++;
+                continue;
+            }
+            let j = i + 1;
+            while (j < len && str.charCodeAt(j) !== 59 && j - i <= 32) {
+                j++;
+            }
+            if (j >= len || str.charCodeAt(j) !== 59) {
+                i++;
+                continue;
+            }
+            const token = str.slice(i + 1, j);
+            if (token.length === 0) {
+                i++;
+                continue;
+            }
+            let replacement;
+            let tier;
+            if (this._removeSet.has(token)) {
+                replacement = "";
+                if (tier === undefined) {
+                    tier = LIMIT_TIER_EXTERNAL;
+                }
+            }
+            else if (this._leaveSet.has(token)) {
+                i++;
+                continue;
+            }
+            else if (token.charCodeAt(0) === 35) {
+                const ncrResult = this._resolveNCR(token);
+                if (ncrResult === undefined) {
+                    i++;
+                    continue;
+                }
+                replacement = ncrResult;
+                tier = LIMIT_TIER_BASE;
+            }
+            else {
+                const resolved = this._resolveName(token);
+                replacement = resolved?.value;
+                tier = resolved?.tier;
+            }
+            if (replacement === undefined) {
+                i++;
+                continue;
+            }
+            if (i > last) {
+                chunks.push(str.slice(last, i));
+            }
+            chunks.push(replacement);
+            last = j + 1;
+            i = last;
+            if (checkLimits && this._tierCounts(tier)) {
+                if (limitExpansions) {
+                    this._totalExpansions++;
+                    if (this._totalExpansions > this._maxTotalExpansions) {
+                        throw new Error(`[EntityReplacer] Entity expansion count limit exceeded: ` +
+                            `${this._totalExpansions} > ${this._maxTotalExpansions}`);
+                    }
+                }
+                if (limitLength) {
+                    const delta = replacement.length - (token.length + 2);
+                    if (delta > 0) {
+                        this._expandedLength += delta;
+                        if (this._expandedLength > this._maxExpandedLength) {
+                            throw new Error(`[EntityReplacer] Expanded content length limit exceeded: ` +
+                                `${this._expandedLength} > ${this._maxExpandedLength}`);
+                        }
+                    }
+                }
+            }
+        }
+        if (last < len) {
+            chunks.push(str.slice(last));
+        }
+        const result = chunks.length === 0 ? str : chunks.join("");
+        return this._postCheck(result, original);
+    }
+    _tierCounts(tier) {
+        if (this._limitTiers.has(LIMIT_TIER_ALL)) {
+            return true;
+        }
+        return this._limitTiers.has(tier);
+    }
+    _resolveName(name) {
+        if (name in this._inputMap) {
+            return { value: this._inputMap[name], tier: LIMIT_TIER_EXTERNAL };
+        }
+        if (name in this._externalMap) {
+            return { value: this._externalMap[name], tier: LIMIT_TIER_EXTERNAL };
+        }
+        if (name in this._baseMap) {
+            return { value: this._baseMap[name], tier: LIMIT_TIER_BASE };
+        }
+        return undefined;
+    }
+    _classifyNCR(cp) {
+        if (cp === 0) {
+            return this._ncrNullLevel;
+        }
+        if (cp >= 0xd800 && cp <= 0xdfff) {
+            return NCR_LEVEL.remove;
+        }
+        if (this._ncrXmlVersion === 1.0) {
+            if (cp >= 0x01 && cp <= 0x1f && !XML10_ALLOWED_C0.has(cp)) {
+                return NCR_LEVEL.remove;
+            }
+        }
+        return -1;
+    }
+    _applyNCRAction(action, token, cp) {
+        switch (action) {
+            case NCR_LEVEL.allow:
+                return String.fromCodePoint(cp);
+            case NCR_LEVEL.remove:
+                return "";
+            case NCR_LEVEL.leave:
+                return undefined;
+            case NCR_LEVEL.throw:
+                throw new Error(`[EntityDecoder] Prohibited numeric character reference ` +
+                    `&${token}; (U+${cp.toString(16).toUpperCase().padStart(4, "0")})`);
+            default:
+                return String.fromCodePoint(cp);
+        }
+    }
+    _resolveNCR(token) {
+        const second = token.charCodeAt(1);
+        let cp;
+        if (second === 120 || second === 88) {
+            cp = parseInt(token.slice(2), 16);
+        }
+        else {
+            cp = parseInt(token.slice(1), 10);
+        }
+        if (Number.isNaN(cp) || cp < 0 || cp > 0x10ffff) {
+            return undefined;
+        }
+        const minimum = this._classifyNCR(cp);
+        if (!this._numericAllowed && minimum < NCR_LEVEL.remove) {
+            return undefined;
+        }
+        const effective = minimum === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, minimum);
+        return this._applyNCRAction(effective, token, cp);
+    }
+};
+exports.EntityDecoderImpl = EntityDecoderImpl;

dist-es/xml-external/nodable_entities.js

+export const XML = {
+    amp: "&",
+    apos: "'",
+    gt: ">",
+    lt: "<",
+    quot: '"',
+};
+export const COMMON_HTML = {
+    nbsp: "\u00a0",
+    copy: "\u00a9",
+    reg: "\u00ae",
+    trade: "\u2122",
+    mdash: "\u2014",
+    ndash: "\u2013",
+    hellip: "\u2026",
+    laquo: "\u00ab",
+    raquo: "\u00bb",
+    lsquo: "\u2018",
+    rsquo: "\u2019",
+    ldquo: "\u201c",
+    rdquo: "\u201d",
+    bull: "\u2022",
+    para: "\u00b6",
+    sect: "\u00a7",
+    deg: "\u00b0",
+    frac12: "\u00bd",
+    frac14: "\u00bc",
+    frac34: "\u00be",
+};
+export const CURRENCY = {
+    cent: "\u00a2",
+    pound: "\u00a3",
+    curren: "\u00a4",
+    yen: "\u00a5",
+    euro: "\u20ac",
+    dollar: "$",
+    fnof: "\u0192",
+    inr: "\u20b9",
+    af: "\u060b",
+    birr: "\u1265\u122d",
+    peso: "\u20b1",
+    rub: "\u20bd",
+    won: "\u20a9",
+    yuan: "\u00a5",
+    cedil: "\u00b8",
+};
+const SPECIAL_CHARS = new Set("!?\\/[]$%{}^&*()<>|+");
+function validateEntityName(name) {
+    if (name[0] === "#") {
+        throw new Error(`[EntityReplacer] Invalid character '#' in entity name: "${name}"`);
+    }
+    for (const ch of name) {
+        if (SPECIAL_CHARS.has(ch)) {
+            throw new Error(`[EntityReplacer] Invalid character '${ch}' in entity name: "${name}"`);
+        }
+    }
+    return name;
+}
+function mergeEntityMaps(...maps) {
+    const out = Object.create(null);
+    for (const map of maps) {
+        if (!map) {
+            continue;
+        }
+        for (const key of Object.keys(map)) {
+            const raw = map[key];
+            if (typeof raw === "string") {
+                out[key] = raw;
+            }
+            else if (raw && typeof raw === "object" && raw.val !== undefined) {
+                const val = raw.val;
+                if (typeof val === "string") {
+                    out[key] = val;
+                }
+            }
+        }
+    }
+    return out;
+}
+const LIMIT_TIER_EXTERNAL = "external";
+const LIMIT_TIER_BASE = "base";
+const LIMIT_TIER_ALL = "all";
+function parseLimitTiers(raw) {
+    if (!raw || raw === LIMIT_TIER_EXTERNAL) {
+        return new Set([LIMIT_TIER_EXTERNAL]);
+    }
+    if (raw === LIMIT_TIER_ALL) {
+        return new Set([LIMIT_TIER_ALL]);
+    }
+    if (raw === LIMIT_TIER_BASE) {
+        return new Set([LIMIT_TIER_BASE]);
+    }
+    if (Array.isArray(raw)) {
+        return new Set(raw);
+    }
+    return new Set([LIMIT_TIER_EXTERNAL]);
+}
+const NCR_LEVEL = Object.freeze({ allow: 0, leave: 1, remove: 2, throw: 3 });
+const XML10_ALLOWED_C0 = new Set([0x09, 0x0a, 0x0d]);
+function parseNCRConfig(ncr) {
+    if (!ncr) {
+        return { xmlVersion: 1.0, onLevel: NCR_LEVEL.allow, nullLevel: NCR_LEVEL.remove };
+    }
+    const xmlVersion = ncr.xmlVersion === 1.1 ? 1.1 : 1.0;
+    const onLevel = NCR_LEVEL[ncr.onNCR ?? "allow"] ?? NCR_LEVEL.allow;
+    const nullLevel = NCR_LEVEL[ncr.nullNCR ?? "remove"] ?? NCR_LEVEL.remove;
+    const clampedNull = Math.max(nullLevel, NCR_LEVEL.remove);
+    return { xmlVersion, onLevel, nullLevel: clampedNull };
+}
+export const EntityDecoderImpl = class EntityDecoderImpl {
+    _limit;
+    _maxTotalExpansions;
+    _maxExpandedLength;
+    _postCheck;
+    _limitTiers;
+    _numericAllowed;
+    _baseMap;
+    _externalMap;
+    _inputMap;
+    _totalExpansions;
+    _expandedLength;
+    _removeSet;
+    _leaveSet;
+    _ncrXmlVersion;
+    _ncrOnLevel;
+    _ncrNullLevel;
+    constructor(options = {}) {
+        this._limit = options.limit || {};
+        this._maxTotalExpansions = this._limit.maxTotalExpansions || 0;
+        this._maxExpandedLength = this._limit.maxExpandedLength || 0;
+        this._postCheck = typeof options.postCheck === "function" ? options.postCheck : (r) => r;
+        this._limitTiers = parseLimitTiers(this._limit.applyLimitsTo ?? LIMIT_TIER_EXTERNAL);
+        this._numericAllowed = options.numericAllowed ?? true;
+        this._baseMap = mergeEntityMaps(XML, options.namedEntities || null);
+        this._externalMap = Object.create(null);
+        this._inputMap = Object.create(null);
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        this._removeSet = new Set(options.remove && Array.isArray(options.remove) ? options.remove : []);
+        this._leaveSet = new Set(options.leave && Array.isArray(options.leave) ? options.leave : []);
+        const ncrCfg = parseNCRConfig(options.ncr);
+        this._ncrXmlVersion = ncrCfg.xmlVersion;
+        this._ncrOnLevel = ncrCfg.onLevel;
+        this._ncrNullLevel = ncrCfg.nullLevel;
+    }
+    setExternalEntities(map) {
+        if (map) {
+            for (const key of Object.keys(map)) {
+                validateEntityName(key);
+            }
+        }
+        this._externalMap = mergeEntityMaps(map);
+    }
+    addExternalEntity(key, value) {
+        validateEntityName(key);
+        if (typeof value === "string" && value.indexOf("&") === -1) {
+            this._externalMap[key] = value;
+        }
+    }
+    addInputEntities(map) {
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        this._inputMap = mergeEntityMaps(map);
+    }
+    reset() {
+        this._inputMap = Object.create(null);
+        this._totalExpansions = 0;
+        this._expandedLength = 0;
+        return this;
+    }
+    setXmlVersion(version) {
+        this._ncrXmlVersion = version === "1.1" || version === 1.1 ? 1.1 : 1.0;
+    }
+    decode(str) {
+        if (typeof str !== "string" || str.length === 0) {
+            return str;
+        }
+        const original = str;
+        const chunks = [];
+        const len = str.length;
+        let last = 0;
+        let i = 0;
+        const limitExpansions = this._maxTotalExpansions > 0;
+        const limitLength = this._maxExpandedLength > 0;
+        const checkLimits = limitExpansions || limitLength;
+        while (i < len) {
+            if (str.charCodeAt(i) !== 38) {
+                i++;
+                continue;
+            }
+            let j = i + 1;
+            while (j < len && str.charCodeAt(j) !== 59 && j - i <= 32) {
+                j++;
+            }
+            if (j >= len || str.charCodeAt(j) !== 59) {
+                i++;
+                continue;
+            }
+            const token = str.slice(i + 1, j);
+            if (token.length === 0) {
+                i++;
+                continue;
+            }
+            let replacement;
+            let tier;
+            if (this._removeSet.has(token)) {
+                replacement = "";
+                if (tier === undefined) {
+                    tier = LIMIT_TIER_EXTERNAL;
+                }
+            }
+            else if (this._leaveSet.has(token)) {
+                i++;
+                continue;
+            }
+            else if (token.charCodeAt(0) === 35) {
+                const ncrResult = this._resolveNCR(token);
+                if (ncrResult === undefined) {
+                    i++;
+                    continue;
+                }
+                replacement = ncrResult;
+                tier = LIMIT_TIER_BASE;
+            }
+            else {
+                const resolved = this._resolveName(token);
+                replacement = resolved?.value;
+                tier = resolved?.tier;
+            }
+            if (replacement === undefined) {
+                i++;
+                continue;
+            }
+            if (i > last) {
+                chunks.push(str.slice(last, i));
+            }
+            chunks.push(replacement);
+            last = j + 1;
+            i = last;
+            if (checkLimits && this._tierCounts(tier)) {
+                if (limitExpansions) {
+                    this._totalExpansions++;
+                    if (this._totalExpansions > this._maxTotalExpansions) {
+                        throw new Error(`[EntityReplacer] Entity expansion count limit exceeded: ` +
+                            `${this._totalExpansions} > ${this._maxTotalExpansions}`);
+                    }
+                }
+                if (limitLength) {
+                    const delta = replacement.length - (token.length + 2);
+                    if (delta > 0) {
+                        this._expandedLength += delta;
+                        if (this._expandedLength > this._maxExpandedLength) {
+                            throw new Error(`[EntityReplacer] Expanded content length limit exceeded: ` +
+                                `${this._expandedLength} > ${this._maxExpandedLength}`);
+                        }
+                    }
+                }
+            }
+        }
+        if (last < len) {
+            chunks.push(str.slice(last));
+        }
+        const result = chunks.length === 0 ? str : chunks.join("");
+        return this._postCheck(result, original);
+    }
+    _tierCounts(tier) {
+        if (this._limitTiers.has(LIMIT_TIER_ALL)) {
+            return true;
+        }
+        return this._limitTiers.has(tier);
+    }
+    _resolveName(name) {
+        if (name in this._inputMap) {
+            return { value: this._inputMap[name], tier: LIMIT_TIER_EXTERNAL };
+        }
+        if (name in this._externalMap) {
+            return { value: this._externalMap[name], tier: LIMIT_TIER_EXTERNAL };
+        }
+        if (name in this._baseMap) {
+            return { value: this._baseMap[name], tier: LIMIT_TIER_BASE };
+        }
+        return undefined;
+    }
+    _classifyNCR(cp) {
+        if (cp === 0) {
+            return this._ncrNullLevel;
+        }
+        if (cp >= 0xd800 && cp <= 0xdfff) {
+            return NCR_LEVEL.remove;
+        }
+        if (this._ncrXmlVersion === 1.0) {
+            if (cp >= 0x01 && cp <= 0x1f && !XML10_ALLOWED_C0.has(cp)) {
+                return NCR_LEVEL.remove;
+            }
+        }
+        return -1;
+    }
+    _applyNCRAction(action, token, cp) {
+        switch (action) {
+            case NCR_LEVEL.allow:
+                return String.fromCodePoint(cp);
+            case NCR_LEVEL.remove:
+                return "";
+            case NCR_LEVEL.leave:
+                return undefined;
+            case NCR_LEVEL.throw:
+                throw new Error(`[EntityDecoder] Prohibited numeric character reference ` +
+                    `&${token}; (U+${cp.toString(16).toUpperCase().padStart(4, "0")})`);
+            default:
+                return String.fromCodePoint(cp);
+        }
+    }
+    _resolveNCR(token) {
+        const second = token.charCodeAt(1);
+        let cp;
+        if (second === 120 || second === 88) {
+            cp = parseInt(token.slice(2), 16);
+        }
+        else {
+            cp = parseInt(token.slice(1), 10);
+        }
+        if (Number.isNaN(cp) || cp < 0 || cp > 0x10ffff) {
+            return undefined;
+        }
+        const minimum = this._classifyNCR(cp);
+        if (!this._numericAllowed && minimum < NCR_LEVEL.remove) {
+            return undefined;
+        }
+        const effective = minimum === -1 ? this._ncrOnLevel : Math.max(this._ncrOnLevel, minimum);
+        return this._applyNCRAction(effective, token, cp);
+    }
+};

dist-types/ts3.4/xml-external/nodable_entities.d.ts

+/**
+ * Contains code from \@nodable/entities v2.1.0
+ * Copyright (c) Amit Gupta (https://solothought.com)
+ * https://github.com/nodable/val-parsers
+ *
+ * This file bundles the EntityDecoder class and the named-entity maps
+ * (XML, COMMON_HTML, CURRENCY).
+ *
+ * This is a temporary solution while using this particular custom
+ * EntityDecoder class. The module-only nature of the original version
+ * is incompatible with some of our users' applications.
+ *
+ * Given that our CJS dist must call `require` to bring in the module, and
+ * because the EntityDecoder class and object are inaccessible via the runtime object surface
+ * of the XMLParser, we must inline the package.
+ *
+ * Q: Why is this necessary given that fast-xml-parser itself uses \@nodable/entities?
+ * A: FXP only uses \@nodable/entities when imported in ESM mode. When importing FXP
+ *    via require, a bundled version is used, unaffected by the module-only nature
+ *    of the entities package.
+ */
+export declare const XML: Record<string, string>;
+export declare const COMMON_HTML: Record<string, string>;
+export declare const CURRENCY: Record<string, string>;
+type EntityValFn = (match: string, captured: string, ...rest: unknown[]) => string;
+type ApplyLimitsTo = "external" | "base" | "all" | Array<"external" | "base">;
+interface EntityDecoderLimitOptions {
+    maxTotalExpansions?: number;
+    maxExpandedLength?: number;
+    applyLimitsTo?: ApplyLimitsTo;
+}
+interface EntityDecoderNCROptions {
+    xmlVersion?: 1.0 | 1.1;
+    onNCR?: "allow" | "leave" | "remove" | "throw";
+    nullNCR?: "remove" | "throw";
+}
+interface EntityDecoderOptions {
+    namedEntities?: Record<string, string | {
+        regex: RegExp;
+        val: string | EntityValFn;
+    }> | null;
+    postCheck?: ((resolved: string, original: string) => string) | null;
+    numericAllowed?: boolean;
+    leave?: string[];
+    remove?: string[];
+    limit?: EntityDecoderLimitOptions;
+    ncr?: EntityDecoderNCROptions;
+}
+export interface EntityDecoder {
+    setExternalEntities(map: Record<string, string | {
+        regex: RegExp;
+        val: string | EntityValFn;
+    }>): void;
+    addExternalEntity(key: string, value: string): void;
+    addInputEntities(map: Record<string, string | {
+        regx?: RegExp;
+        regex?: RegExp;
+        val: string | EntityValFn;
+    }>): void;
+    reset(): this;
+    decode(str: string): string;
+    setXmlVersion(version: string): void;
+}
+export declare const EntityDecoderImpl: new (options?: EntityDecoderOptions) => EntityDecoder;
+export {};

dist-types/xml-external/nodable_entities.d.ts

+/**
+ * Contains code from \@nodable/entities v2.1.0
+ * Copyright (c) Amit Gupta (https://solothought.com)
+ * https://github.com/nodable/val-parsers
+ *
+ * This file bundles the EntityDecoder class and the named-entity maps
+ * (XML, COMMON_HTML, CURRENCY).
+ *
+ * This is a temporary solution while using this particular custom
+ * EntityDecoder class. The module-only nature of the original version
+ * is incompatible with some of our users' applications.
+ *
+ * Given that our CJS dist must call `require` to bring in the module, and
+ * because the EntityDecoder class and object are inaccessible via the runtime object surface
+ * of the XMLParser, we must inline the package.
+ *
+ * Q: Why is this necessary given that fast-xml-parser itself uses \@nodable/entities?
+ * A: FXP only uses \@nodable/entities when imported in ESM mode. When importing FXP
+ *    via require, a bundled version is used, unaffected by the module-only nature
+ *    of the entities package.
+ */
+export declare const XML: Record<string, string>;
+export declare const COMMON_HTML: Record<string, string>;
+export declare const CURRENCY: Record<string, string>;
+type EntityValFn = (match: string, captured: string, ...rest: unknown[]) => string;
+type ApplyLimitsTo = "external" | "base" | "all" | Array<"external" | "base">;
+interface EntityDecoderLimitOptions {
+    maxTotalExpansions?: number;
+    maxExpandedLength?: number;
+    applyLimitsTo?: ApplyLimitsTo;
+}
+interface EntityDecoderNCROptions {
+    xmlVersion?: 1.0 | 1.1;
+    onNCR?: "allow" | "leave" | "remove" | "throw";
+    nullNCR?: "remove" | "throw";
+}
+interface EntityDecoderOptions {
+    namedEntities?: Record<string, string | {
+        regex: RegExp;
+        val: string | EntityValFn;
+    }> | null;
+    postCheck?: ((resolved: string, original: string) => string) | null;
+    numericAllowed?: boolean;
+    leave?: string[];
+    remove?: string[];
+    limit?: EntityDecoderLimitOptions;
+    ncr?: EntityDecoderNCROptions;
+}
+export interface EntityDecoder {
+    setExternalEntities(map: Record<string, string | {
+        regex: RegExp;
+        val: string | EntityValFn;
+    }>): void;
+    addExternalEntity(key: string, value: string): void;
+    addInputEntities(map: Record<string, string | {
+        regx?: RegExp;
+        regex?: RegExp;
+        val: string | EntityValFn;
+    }>): void;
+    reset(): this;
+    decode(str: string): string;
+    setXmlVersion(version: string): void;
+}
+export declare const EntityDecoderImpl: new (options?: EntityDecoderOptions) => EntityDecoder;
+export {};

dist-cjs/xml-parser.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseXML = parseXML;
-const entities_1 = require("@nodable/entities");
 const fast_xml_parser_1 = require("fast-xml-parser");
-const { EntityDecoder: EntityDecoderImpl } = require("@nodable/entities");
-const entityDecoder = new EntityDecoderImpl({
-    namedEntities: { ...entities_1.XML, ...entities_1.COMMON_HTML, ...entities_1.CURRENCY },
+const nodable_entities_1 = require("./xml-external/nodable_entities");
+const entityDecoder = new nodable_entities_1.EntityDecoderImpl({
+    namedEntities: { ...nodable_entities_1.XML, ...nodable_entities_1.COMMON_HTML, ...nodable_entities_1.CURRENCY },
     numericAllowed: true,
@@ -10,0 +9,0 @@ limit: {

dist-es/xml-parser.js

@@ -1,4 +0,3 @@
-import { COMMON_HTML, CURRENCY, XML } from "@nodable/entities";
 import { XMLParser } from "fast-xml-parser";
-const { EntityDecoder: EntityDecoderImpl } = require("@nodable/entities");
+import { COMMON_HTML, CURRENCY, EntityDecoderImpl, XML } from "./xml-external/nodable_entities";
 const entityDecoder = new EntityDecoderImpl({
@@ -5,0 +4,0 @@ namedEntities: { ...XML, ...COMMON_HTML, ...CURRENCY },

dist-types/ts3.4/escape-attribute.d.ts

@@ -0,1 +1,6 @@
+/**
+ * @internal
+ *
+ * Escapes characters that can not be in an XML attribute.
+ */
 export declare function escapeAttribute(value: string): string;

dist-types/ts3.4/escape-element.d.ts

@@ -0,1 +1,6 @@
+/**
+ * @internal
+ *
+ * Escapes characters that can not be in an XML element.
+ */
 export declare function escapeElement(value: string): string;

dist-types/ts3.4/index.d.ts

@@ -0,3 +1,12 @@
+/**
+ * @internal
+ */
 export * from "./XmlNode";
+/**
+ * @internal
+ */
 export * from "./XmlText";
+/**
+ * @internal
+ */
 export { parseXML } from "./xml-parser";

dist-types/ts3.4/stringable.d.ts

@@ -0,3 +1,6 @@
+/**
+ * @internal
+ */
 export interface Stringable {
-  toString(): string;
+    toString(): string;
 }

dist-types/ts3.4/xml-parser.browser.d.ts

@@ -0,1 +1,9 @@
+/**
+ * Cases where this differs from fast-xml-parser:
+ *
+ * 1. Mixing text with nested tags (does not occur in AWS REST XML).
+ * <mixed-text> hello, <bold>world</bold>, how are you?</mixed-text>
+ *
+ * @internal
+ */
 export declare function parseXML(xmlString: string): any;

dist-types/ts3.4/xml-parser.d.ts

@@ -0,1 +1,4 @@
+/**
+ * @internal
+ */
 export declare function parseXML(xmlString: string): any;

dist-types/ts3.4/XmlNode.d.ts

 import { Stringable } from "./stringable";
+/**
+ * @internal
+ *
+ * Represents an XML node.
+ */
 export declare class XmlNode {
-  private name;
-  readonly children: Stringable[];
-  private attributes;
-  static of(name: string, childText?: string, withName?: string): XmlNode;
-  constructor(name: string, children?: Stringable[]);
-  withName(name: string): XmlNode;
-  addAttribute(name: string, value: any): XmlNode;
-  addChildNode(child: Stringable): XmlNode;
-  removeAttribute(name: string): XmlNode;
-  n(name: string): XmlNode;
-  c(child: Stringable): XmlNode;
-  a(name: string, value: any): XmlNode;
-  cc(input: any, field: string, withName?: string): void;
-  l(
-    input: any,
-    listName: string,
-    memberName: string,
-    valueProvider: Function
-  ): void;
-  lc(
-    input: any,
-    listName: string,
-    memberName: string,
-    valueProvider: Function
-  ): void;
-  toString(): string;
+    private name;
+    readonly children: Stringable[];
+    private attributes;
+    static of(name: string, childText?: string, withName?: string): XmlNode;
+    constructor(name: string, children?: Stringable[]);
+    withName(name: string): XmlNode;
+    addAttribute(name: string, value: any): XmlNode;
+    addChildNode(child: Stringable): XmlNode;
+    removeAttribute(name: string): XmlNode;
+    /**
+     * @internal
+     * Alias of {@link XmlNode#withName(string)} for codegen brevity.
+     */
+    n(name: string): XmlNode;
+    /**
+     * @internal
+     * Alias of {@link XmlNode#addChildNode(string)} for codegen brevity.
+     */
+    c(child: Stringable): XmlNode;
+    /**
+     * @internal
+     * Checked version of {@link XmlNode#addAttribute(string)} for codegen brevity.
+     */
+    a(name: string, value: any): XmlNode;
+    /**
+     * Create a child node.
+     * Used in serialization of string fields.
+     * @internal
+     */
+    cc(input: any, field: string, withName?: string): void;
+    /**
+     * Creates list child nodes.
+     * @internal
+     */
+    l(input: any, listName: string, memberName: string, valueProvider: Function): void;
+    /**
+     * Creates list child nodes with container.
+     * @internal
+     */
+    lc(input: any, listName: string, memberName: string, valueProvider: Function): void;
+    toString(): string;
 }

dist-types/ts3.4/XmlText.d.ts

 import { Stringable } from "./stringable";
+/**
+ * @internal
+ *
+ * Represents an XML text value.
+ */
 export declare class XmlText implements Stringable {
-  private value;
-  constructor(value: string);
-  toString(): string;
+    private value;
+    constructor(value: string);
+    toString(): string;
 }

package.json

 {
   "name": "@aws-sdk/xml-builder",
-  "version": "3.972.20",
+  "version": "3.972.21",
   "description": "XML utilities for the AWS SDK",
@@ -5,0 +5,0 @@ "dependencies": {

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

58271

94.42%

Number of package files

33

13.79%

Lines of code

1404

155.27%

Number of medium maintenance alerts

0

-100%

No dependency changes