Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
A fully tested and covered polyfill for new DOM Level 4 entries
Many thanks to cdnjs for hosting this script. Following an example on how to include it.
<script
src="//cdnjs.cloudflare.com/ajax/libs/dom4/2.0.0/dom4.js"
>/* DOM4 */</script>
Both query
and queryAll
have been removed, while CSS :scope
selector has been added.
This is a fully tested and covered polyfill for both new DOM Level 4 parentNode entries:
And for new DOM Level 4 childNode entries:
The implemented test is conform to current specifications.
Other fixes/standardized behaviors include:
KeyboardEvent
, MouseEvent
and the latest way to create new Event('type')
:scope
selector for any HTML Element (no document
since useless, sorry)requestAnimationFrame
and cancelAnimationFrame
are polyfilled too but the least legacy fallback to setTimeout does not support accurate timing and doesn't slow down execution with that logic. Feel free to load upfront other polyfills if needed.If you need other polyfills too, have a look at another DOM-shim repo.
Theoretically compatible with all browsers you know that are truly used these days, here a list:
It's way easier if you tell me which browser in a current relevant market share is not supported :-)
For IE8 only it's recommended to include ie8 script before dom4
or CustomEvent
, addEventListener
, and dispatchEvent
won't work as expected.
The minified version is here, while the max one here. If you want to test directly try this page, it should be green.
If you found a bug, want to contribute or have any questions feel free to fill an issue or pull request, and help us to improve the Dom4
Dom4 Code released under the MIT license.
FAQs
a fully tested and covered polyfill for new DOM Level 4 entries
The npm package dom4 receives a total of 57,572 weekly downloads. As such, dom4 popularity was classified as popular.
We found that dom4 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.
Security News
Biden's executive order pushes for AI-driven cybersecurity, software supply chain transparency, and stronger protections for federal and open source systems.