jsdom - npm Package Compare versions

Comparing version 27.0.0 to 27.0.1

lib/jsdom/browser/js-globals.json

@@ -177,3 +177,3 @@ {
   },
-  "BigUint64Array": {
+  "Float32Array": {
     "writable": true,
@@ -183,3 +183,3 @@ "enumerable": false,
   },
-  "BigInt64Array": {
+  "Float64Array": {
     "writable": true,
@@ -194,3 +194,3 @@ "enumerable": false,
   },
-  "Float32Array": {
+  "BigUint64Array": {
     "writable": true,
@@ -200,3 +200,3 @@ "enumerable": false,
   },
-  "Float64Array": {
+  "BigInt64Array": {
     "writable": true,
@@ -226,7 +226,2 @@ "enumerable": false,
   },
-  "Iterator": {
-    "writable": true,
-    "enumerable": false,
-    "configurable": true
-  },
   "WeakMap": {
@@ -307,3 +302,3 @@ "writable": true,
   },
-  "SuppressedError": {
+  "Iterator": {
     "writable": true,
@@ -313,17 +308,2 @@ "enumerable": false,
   },
-  "DisposableStack": {
-    "writable": true,
-    "enumerable": false,
-    "configurable": true
-  },
-  "AsyncDisposableStack": {
-    "writable": true,
-    "enumerable": false,
-    "configurable": true
-  },
-  "Float16Array": {
-    "writable": true,
-    "enumerable": false,
-    "configurable": true
-  },
   "SharedArrayBuffer": {
@@ -330,0 +310,0 @@ "writable": true,

lib/jsdom/living/generated/Blob.js

@@ -105,3 +105,11 @@ "use strict";
               } else if (utils.isArrayBuffer(nextItem)) {
+                nextItem = conversions["ArrayBuffer"](nextItem, {
+                  context: "Failed to construct 'Blob': parameter 1" + "'s element",
+                  globals: globalObject
+                });
               } else if (ArrayBuffer.isView(nextItem)) {
+                nextItem = conversions["ArrayBufferView"](nextItem, {
+                  context: "Failed to construct 'Blob': parameter 1" + "'s element",
+                  globals: globalObject
+                });
               } else {
@@ -108,0 +116,0 @@ nextItem = conversions["USVString"](nextItem, {

lib/jsdom/living/generated/Crypto.js

@@ -111,2 +111,6 @@ "use strict";
         if (ArrayBuffer.isView(curArg)) {
+          curArg = conversions["ArrayBufferView"](curArg, {
+            context: "Failed to execute 'getRandomValues' on 'Crypto': parameter 1",
+            globals: globalObject
+          });
         } else {
@@ -113,0 +117,0 @@ throw new globalObject.TypeError(

lib/jsdom/living/generated/File.js

@@ -112,3 +112,11 @@ "use strict";
             } else if (utils.isArrayBuffer(nextItem)) {
+              nextItem = conversions["ArrayBuffer"](nextItem, {
+                context: "Failed to construct 'File': parameter 1" + "'s element",
+                globals: globalObject
+              });
             } else if (ArrayBuffer.isView(nextItem)) {
+              nextItem = conversions["ArrayBufferView"](nextItem, {
+                context: "Failed to construct 'File': parameter 1" + "'s element",
+                globals: globalObject
+              });
             } else {
@@ -115,0 +123,0 @@ nextItem = conversions["USVString"](nextItem, {

lib/jsdom/living/generated/utils.js

@@ -113,7 +113,7 @@ "use strict";
 
-const byteLengthGetter =
+const arrayBufferByteLengthGetter =
     Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get;
 function isArrayBuffer(value) {
   try {
-    byteLengthGetter.call(value);
+    arrayBufferByteLengthGetter.call(value);
     return true;
@@ -125,2 +125,13 @@ } catch {
 
+const sharedArrayBufferByteLengthGetter =
+  Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get;
+function isSharedArrayBuffer(value) {
+  try {
+    sharedArrayBufferByteLengthGetter.call(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
 function iteratorResult([key, value], kind) {
@@ -224,2 +235,3 @@ let result;
   isArrayBuffer,
+  isSharedArrayBuffer,
   isArrayIndexPropName,
@@ -226,0 +238,0 @@ supportsPropertyIndex,

lib/jsdom/living/generated/WebSocket.js

@@ -214,2 +214,6 @@ "use strict";
             if (ArrayBuffer.isView(curArg)) {
+              curArg = conversions["ArrayBufferView"](curArg, {
+                context: "Failed to execute 'send' on 'WebSocket': parameter 1",
+                globals: globalObject
+              });
             } else {
@@ -216,0 +220,0 @@ throw new globalObject.TypeError(

lib/jsdom/living/generated/XMLHttpRequest.js

@@ -310,3 +310,11 @@ "use strict";
             } else if (utils.isArrayBuffer(curArg)) {
+              curArg = conversions["ArrayBuffer"](curArg, {
+                context: "Failed to execute 'send' on 'XMLHttpRequest': parameter 1",
+                globals: globalObject
+              });
             } else if (ArrayBuffer.isView(curArg)) {
+              curArg = conversions["ArrayBufferView"](curArg, {
+                context: "Failed to execute 'send' on 'XMLHttpRequest': parameter 1",
+                globals: globalObject
+              });
             } else {
@@ -313,0 +321,0 @@ curArg = conversions["USVString"](curArg, {

lib/jsdom/living/nodes/Element-impl.js

@@ -124,2 +124,7 @@ "use strict";
 
+    // clear domSelector cached results on class change
+    if (name === "class") {
+      this._ownerDocument._domSelector.clear();
+    }
+
     this._attrModifiedSlotableMixin(name, value, oldValue);
@@ -126,0 +131,0 @@ }

package.json

 {
   "name": "jsdom",
-  "version": "27.0.0",
+  "version": "27.0.1",
   "description": "A JavaScript implementation of many web standards",
@@ -26,6 +26,6 @@ "keywords": [
   "dependencies": {
-    "@asamuzakjp/dom-selector": "^6.5.4",
-    "cssstyle": "^5.3.0",
+    "@asamuzakjp/dom-selector": "^6.7.2",
+    "cssstyle": "^5.3.1",
     "data-urls": "^6.0.0",
-    "decimal.js": "^10.5.0",
+    "decimal.js": "^10.6.0",
     "html-encoding-sniffer": "^4.0.0",
@@ -35,3 +35,3 @@ "http-proxy-agent": "^7.0.2",
     "is-potential-custom-element-name": "^1.0.1",
-    "parse5": "^7.3.0",
+    "parse5": "^8.0.0",
     "rrweb-cssom": "^0.8.0",
@@ -45,4 +45,4 @@ "saxes": "^6.0.0",
     "whatwg-mimetype": "^4.0.0",
-    "whatwg-url": "^15.0.0",
-    "ws": "^8.18.2",
+    "whatwg-url": "^15.1.0",
+    "ws": "^8.18.3",
     "xml-name-validator": "^5.0.0"
@@ -61,8 +61,8 @@ },
     "benchmark": "^2.1.4",
-    "eslint": "^9.35.0",
+    "eslint": "^9.37.0",
     "eslint-plugin-html": "^8.1.3",
     "globals": "^16.4.0",
     "js-yaml": "^4.1.0",
-    "minimatch": "^10.0.1",
-    "mocha": "^11.7.2",
+    "minimatch": "^10.0.3",
+    "mocha": "^11.7.4",
     "mocha-sugar-free": "^1.4.0",
@@ -72,3 +72,3 @@ "npm-run-all2": "^8.0.4",
     "server-destroy": "^1.0.1",
-    "webidl2js": "^19.0.0",
+    "webidl2js": "^19.1.0",
     "yargs": "^18.0.0"
@@ -75,0 +75,0 @@ },

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 5 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 5 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3286108

0.05%

Lines of code

87435

0.03%

Dependency changes

• + Added

  parse5@8.0.0
  (transitive)

• - Removed

  parse5@7.3.0
  (transitive)

• Updated

  @asamuzakjp/dom-selector@^6.7.2

• Updated

  cssstyle@^5.3.1

• Updated

  decimal.js@^10.6.0

• Updated

  parse5@^8.0.0

• Updated

  whatwg-url@^15.1.0

• Updated

  ws@^8.18.3