@boxyhq/saml20 - npm Package Compare versions

Comparing version 1.4.11 to 1.4.12

dist/post.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createPostForm = void 0;
+const escapeHtml = (unsafeHtml) => {
+    return unsafeHtml
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#039;');
+};
 const createPostForm = (postUrl, params) => {
     const parr = (params || []).map(({ name, value }) => {
-        return `<input type="hidden" name="${name}" value="${value}"/>`;
+        return `<input type="hidden" name="${name}" value="${escapeHtml(value)}"/>`;
     });
@@ -8,0 +16,0 @@ const formElements = [

package.json

 {
   "name": "@boxyhq/saml20",
-  "version": "1.4.11",
+  "version": "1.4.12",
   "description": "SAML 2.0 token parser for Node.js",
@@ -51,6 +51,6 @@ "keywords": [
     "@types/mocha": "10.0.6",
-    "@types/node": "20.11.17",
+    "@types/node": "20.11.19",
     "@types/xml2js": "0.4.14",
-    "@typescript-eslint/eslint-plugin": "7.0.1",
-    "@typescript-eslint/parser": "7.0.1",
+    "@typescript-eslint/eslint-plugin": "7.0.2",
+    "@typescript-eslint/parser": "7.0.2",
     "eslint": "8.56.0",
@@ -61,3 +61,3 @@ "eslint-config-prettier": "9.1.0",
     "prettier": "3.2.5",
-    "release-it": "17.0.3",
+    "release-it": "17.1.1",
     "ts-node": "10.9.2",
@@ -64,0 +64,0 @@ "tsconfig-paths": "4.2.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

61864

increased by0.38%

Lines of code

1301

increased by0.62%

No dependency changes