postcss - npm Package Compare versions

Comparing version 8.2.4 to 8.2.5

CHANGELOG.md

 # Change Log
 This project adheres to [Semantic Versioning](https://semver.org/).
 
+## 8.2.5
+* Fixed escaped characters handling in `list.split` (by Natalie Weizenbaum).
+
 ## 8.2.4
@@ -5,0 +8,0 @@ * Added plugin name to `postcss.plugin()` warning (by Tom Williams).

lib/list.js

@@ -14,8 +14,8 @@ 'use strict'
     for (let letter of string) {
-      if (quote) {
-        if (escape) {
-          escape = false
-        } else if (letter === '\\') {
-          escape = true
-        } else if (letter === quote) {
+      if (escape) {
+        escape = false
+      } else if (letter === '\\') {
+        escape = true
+      } else if (quote) {
+        if (letter === quote) {
           quote = false
@@ -22,0 +22,0 @@ }

lib/map-generator.js

@@ -216,2 +216,9 @@ 'use strict'
 
+    let noSource = '<no source>'
+    let mapping = {
+      source: '',
+      generated: { line: 0, column: 0 },
+      original: { line: 0, column: 0 }
+    }
+
     let lines, last
@@ -222,17 +229,14 @@ this.stringify(this.root, (str, node, type) => {
       if (node && type !== 'end') {
+        mapping.generated.line = line
+        mapping.generated.column = column - 1
         if (node.source && node.source.start) {
-          this.map.addMapping({
-            source: this.sourcePath(node),
-            generated: { line, column: column - 1 },
-            original: {
-              line: node.source.start.line,
-              column: node.source.start.column - 1
-            }
-          })
+          mapping.source = this.sourcePath(node)
+          mapping.original.line = node.source.start.line
+          mapping.original.column = node.source.start.column - 1
+          this.map.addMapping(mapping)
         } else {
-          this.map.addMapping({
-            source: '<no source>',
-            original: { line: 1, column: 0 },
-            generated: { line, column: column - 1 }
-          })
+          mapping.source = noSource
+          mapping.original.line = 1
+          mapping.original.column = 0
+          this.map.addMapping(mapping)
         }
@@ -254,16 +258,15 @@ }
           if (node.source && node.source.end) {
-            this.map.addMapping({
-              source: this.sourcePath(node),
-              generated: { line, column: column - 2 },
-              original: {
-                line: node.source.end.line,
-                column: node.source.end.column - 1
-              }
-            })
+            mapping.source = this.sourcePath(node)
+            mapping.original.line = node.source.end.line
+            mapping.original.column = node.source.end.column - 1
+            mapping.generated.line = line
+            mapping.generated.column = column - 2
+            this.map.addMapping(mapping)
           } else {
-            this.map.addMapping({
-              source: '<no source>',
-              original: { line: 1, column: 0 },
-              generated: { line, column: column - 1 }
-            })
+            mapping.source = noSource
+            mapping.original.line = 1
+            mapping.original.column = 0
+            mapping.generated.line = line
+            mapping.generated.column = column - 1
+            this.map.addMapping(mapping)
           }
@@ -270,0 +273,0 @@ }

lib/processor.js

@@ -8,3 +8,3 @@ 'use strict'
   constructor (plugins = []) {
-    this.version = '8.2.4'
+    this.version = '8.2.5'
     this.plugins = this.normalize(plugins)
@@ -11,0 +11,0 @@ }

package.json

 {
   "name": "postcss",
-  "version": "8.2.4",
+  "version": "8.2.5",
   "description": "Tool for transforming styles with JS plugins",
@@ -5,0 +5,0 @@ "engines": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

203659

0.15%

Lines of code

5776

0.03%

No dependency changes