Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

hast-util-is-javascript

Package Overview
Dependencies
Maintainers
0
Versions
9
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

hast-util-is-javascript

hast utility to check if an element is a JavaScript script

  • 3.0.1
  • latest
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
20K
increased by4.71%
Maintainers
0
Weekly downloads
 
Created
Source

hast-util-is-javascript

Build Coverage Downloads Size Sponsors Backers Chat

hast utility to check if an element is a JavaScript script.

Contents

What is this?

This package is a utility to check whether a hast node is a <script> that contains or references JavaScript.

When should I use this?

You can use this package to check whether <script> elements contain or reference JavaScript or something else.

Install

This package is ESM only. In Node.js (version 16+), install with npm:

npm install hast-util-is-javascript

In Deno with esm.sh:

import {isJavaScript} from 'https://esm.sh/hast-util-is-javascript@3'

In browsers with esm.sh:

<script type="module">
  import {isJavaScript} from 'https://esm.sh/hast-util-is-javascript@3?bundle'
</script>

Use

import {h} from 'hastscript'
import {isJavaScript} from 'hast-util-is-javascript'

isJavaScript(h('script')) //=> true
isJavaScript(h('script', {type: 'text/ecmascript'})) //=> true
isJavaScript(h('script', {language: 'ecmascript'})) //=> true
isJavaScript(h('script', {type: 'text/fooscript'})) //=> false
isJavaScript(h('script', {language: 'fooscript'})) //=> false

API

This package exports the identifier isJavaScript. There is no default export.

isJavaScript(node)

Check if a node is a <script> that contains or references JavaScript.

Returns true if node is a <script> element that has a valid JavaScript type, has no type and a valid JavaScript language, or has neither.

Parameters
  • node (Node) — node to check
Returns

Whether a node is a <script> that contains or references JavaScript (boolean).

Syntax

HTML is parsed according to WHATWG HTML (the living standard), which is also followed by all browsers.

Syntax tree

The syntax tree used is hast.

Types

This package is fully typed with TypeScript.

Compatibility

Projects maintained by the unified collective are compatible with maintained versions of Node.js.

When we cut a new major release, we drop support for unmaintained versions of Node. This means we try to keep the current release line, hast-util-is-javascript@^3, compatible with Node.js 16.

Security

As rehype works on HTML and improper use of HTML can open you up to a cross-site scripting (XSS) attack, use of rehype can also be unsafe. Use rehype-sanitize to make the tree safe.

Contribute

See contributing.md in rehypejs/.github for ways to get started. See support.md for ways to get help.

This project has a code of conduct. By interacting with this repository, organization, or community you agree to abide by its terms.

License

MIT © Titus Wormer

Keywords

FAQs

Package last updated on 27 Sep 2024

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc