js-stringify - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

index.js

@@ -13,3 +13,6 @@ 'use strict';
              .replace(/\u2028/g, '\\u2028')
-             .replace(/\u2029/g, '\\u2029');
+             .replace(/\u2029/g, '\\u2029')
+             .replace(/</g, '\\u003C')
+             .replace(/>/g, '\\u003E')
+             .replace(/\//g, '\\u002F');
 }

package.json

 {
   "name": "js-stringify",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Stringify an object so it can be safely inlined in JavaScript code",
@@ -5,0 +5,0 @@ "keywords": [],

README.md

@@ -24,2 +24,8 @@ # js-stringify
 assert(stringify({foo: 'bar'}) === '{"foo":"bar"}');
+assert(stringify(undefined) === 'undefined');
+assert(stringify(null) === 'null');
+assert(
+  stringify({val: "</script><script>alert('bad actor')</script>"}) ===
+  '{"val":"\\u003C\\u002Fscript\\u003E\\u003Cscript\\u003Ealert(\'bad actor\')\\u003C\\u002Fscript\\u003E"}'
+);
 ```
@@ -26,0 +32,0 @@

test/index.js

@@ -12,3 +12,7 @@ 'use strict';
 assert(stringify(null) === 'null');
+assert(
+  stringify({val: "</script><script>alert('bad actor')</script>"}) ===
+  '{"val":"\\u003C\\u002Fscript\\u003E\\u003Cscript\\u003Ealert(\'bad actor\')\\u003C\\u002Fscript\\u003E"}'
+);
 
 console.log('tests passed');

No alert changes

Improved metrics

Total package byte prevSize

3832

17.91%

Lines of code

30

30.43%

Number of lines in readme file

35

20.69%

No dependency changes