
Product
Introducing Tier 1 Reachability: Precision CVE Triage for Enterprise Teams
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
cda-schematron-validator
Advanced tools
Fork of Eric Wadkins' javascript implementation of schematron testing for C-CDA XML documents. This includes bug fixes and some house keeping.
Fix grunt race condition reported by github
"file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user's .bashrc file or replace /etc/shadow file if the GruntJS user is root."
validateFileObjectAsync
which allows to supply an object with key, value pairs where key represents the identifier of the xml, and the value represents xml file content or path to validatevalidateFileObjectAsync
methodtest/asyncFileList.test.js
has the example usagefileInfo
that would return the key
the identifier of the xml to identify and debug issuesvalidateFileListAsync
now has the property fileIndex
that will give an indication of which xml file the result belongs to for debugging purposesvalidateFileListAsync
which allows to supply an array of xml file content or paths to validatevalidateFileListAsync
methodtest/asyncFileList.test.js
has the example usageMajor deviations from the source repository
By default the warning will be turned off in contrast to the parent repository
To get warnings, users have to explicitly specify the option includeWarnings
with value boolean true
We also deviate from the previous behavior where all the checks for warnings were done at the assertion level just before testing the xpath. We now would not even parse the phase with @id="warnings" which should improve the performance.
Minor cosmetic changes to the code
Only keeping the necessary data in the test files taken from HL7 C-CDA schematron repository to avoid bloating the module
Added pre-commit hooks with husky
Added code standardization with prettier, ESLint, and lint-staged
validateAsync
testsAsync
to test validateAsync
A fork to the original cda-schematron. All credit to Eric Wadkins. Visit the github https://github.com/ewadkins/cda-schematron for the original repo.
This is just a cosmetic change with updated node modules, a couple of minor bugs observed, and esversion 6 changes.
The changes are fully backward compatible. So, leaving the original documentation as is below.
In addition to everything that was possible,
you can now supply a new option parameter parsedSchematronMap
. You can create a schematron map as follows.
const fs = require('fs');
const dom = require('@xmldom/xmldom').DOMParser;
const { parseSchematron, validate } = require('cda-schematron-validator');
const schematronString = fs.readFileSync('SchematronFilePath', 'utf-8').toString();
const schematronDoc = new dom().parseFromString(schematronString);
const schematronMap = parseSchematron(schematronDoc);
const options = {
parsedSchematronMap: schematronMap
};
const results = validate('xml string or file path', 'schematron sting, file path or null', options);
If a schematron map is provided, the schematron string or path will not be read.
To install this npm module, it will be
npm i cda-schematron-validator
Mocha VS Code configuratin added to directly execute the test file in test/tests.js
using VS Code.
A javascript implementation of schematron testing for XML documents. This specifically resolves a need for a package that allows a quick, reliable install for validating HL7 clinical documents, such as C-CDA.
Check out cda-schematron-server, a server wrapper of cda-schematron, for easy schematron validation.
var validator = require('cda-schematron');
var xmlPath = 'someFile.xml';
var schematronPath = 'someFile.sch';
var fs = require('fs');
var xml = fs.readFileSync(xmlPath).toString();
var schematron = fs.readFileSync(schematronPath).toString();
var results = validator.validate(xml, schematron);
File paths can also be passed to the validator directly. The following lines all return the same results:
var results = validator.validate(xml, schematronPath);
var results = validator.validate(xmlPath, schematron);
var results = validator.validate(xmlPath, schematronPath);
results
is an object containing arrays errors
, warnings
, and ignoreds
.
Errors and warnings are reported as determined by the schematron and test descriptions. They are of the following form:
{
type: type, // "error" or "warning"
test: test, // xpath test
simplifiedTest: simplifiedTest, // xpath test with resource values included, if applicable, null otherwise
description: description, // schematron description of the test case
line: line, // line number of the violating context
path: path, // xpath path of the violating context
patternId: patternId, // schematron-assigned pattern id
ruleId: ruleId, // schematron-assigned rule id
assertionId: assertionId, // schematron-assigned assertion id
context: context, // xpath context of the rule
xml: xml // xml snippet of the violating context
}
Ignored tests are those that resulted in an exception while running (eg. the test is invalid xpath and could not be parsed properly) and require manual inspection. They are of the following form:
{
errorMessage: errorMessage, // reason for the exception/ignoring the test
type: type, // "error" or "warning"
test: test, // xpath test
simplifiedTest: simplifiedTest, // xpath test with resource values included, if applicable, null otherwise
description: description, // schematron description of the test case
patternId: patternId, // schematron-assigned pattern id
ruleId: ruleId, // schematron-assigned rule id
assertionId: assertionId, // schematron-assigned assertion id
context: context, // xpath context of the rule
}
The validate
function takes in an options
object as an optional third argument. The three fields that can be included in options
are as follows:
includeWarnings
: true
or false
, this determines whether or not warnings should be tested and returned. Defaults to true
.
resourceDir
: the path to a directory containing resource files (eg. voc.xml) which may be necessary for some schematron tests. Defaults to './'
, the current directory.
xmlSnippetMaxLength
: an integer, which is the maximum length of the xml
field in validation results. Defaults to 200
. Set to 0
for unlimited length.
Here is an example with warnings disabled:
var results = validator.validate(xml, schematron, { includeWarnings: false });
The validator uses a cache to store parsed schematrons, an intermediate data structure used to store revelant schematron information. This reduces the runtime of the validator when validating against the same schematron multiple times. You can clear the cache at any time with:
validator.clearCache();
Copyright © 2017 Eric Wadkins
Copyright © 2022 Priyaranjan (Raj) Tokachichu
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
FAQs
Fork of Eric Wadkins' javascript implementation of schematron testing for C-CDA XML documents. This includes bug fixes and some house keeping.
The npm package cda-schematron-validator receives a total of 437 weekly downloads. As such, cda-schematron-validator popularity was classified as not popular.
We found that cda-schematron-validator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.