
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
rdfxml-streaming-parser
Advanced tools
A fast, streaming RDF/XML parser that outputs RDFJS-compliant quads.
$ yarn install rdfxml-streaming-parser
This package also works out-of-the-box in browsers via tools such as webpack and browserify.
import {RdfXmlParser} from "rdfxml-streaming-parser";
or
const RdfXmlParser = require("rdfxml-streaming-parser").RdfXmlParser;
RdfXmlParser
is a Node Transform stream
that takes in chunks of RDF/XML data,
and outputs RDFJS-compliant quads.
It can be used to pipe
streams to,
or you can write strings into the parser directly.
const myParser = new RdfXmlParser();
fs.createReadStream('myfile.rdf')
.pipe(myParser)
.on('data', console.log)
.on('error', console.error)
.on('end', () => console.log('All triples were parsed!'));
const myParser = new RdfXmlParser();
fs.createReadStream('myfile.rdf')
.pipe(myParser)
.on('data', console.log)
.on('version', console.log) // Log rdf:version attribute values
.on('error', console.error)
.on('end', () => console.log('All triples were parsed!'));
const myParser = new RdfXmlParser();
myParser
.on('data', console.log)
.on('error', console.error)
.on('end', () => console.log('All triples were parsed!'));
myParser.write('<?xml version="1.0"?>');
myParser.write(`<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:ex="http://example.org/stuff/1.0/"
xml:base="http://example.org/triples/">`);
myParser.write(`<rdf:Description rdf:about="http://www.w3.org/TR/rdf-syntax-grammar">`);
myParser.write(`<ex:prop />`);
myParser.write(`</rdf:Description>`);
myParser.write(`</rdf:RDF>`);
myParser.end();
This parser implements the RDFJS Sink interface,
which makes it possible to alternatively parse streams using the import
method.
const myParser = new RdfXmlParser();
const myTextStream = fs.createReadStream('myfile.rdf');
myParser.import(myTextStream)
.on('data', console.log)
.on('error', console.error)
.on('end', () => console.log('All triples were parsed!'));
Optionally, the following parameters can be set in the RdfXmlParser
constructor:
dataFactory
: A custom RDFJS DataFactory to construct terms and triples. (Default: require('@rdfjs/data-model')
)baseIRI
: An initial default base IRI. (Default: ''
)defaultGraph
: The default graph for constructing quads. (Default: defaultGraph()
)strict
: If the internal SAX parser should parse XML in strict mode, and error if it is invalid. (Default: false
)trackPosition
: If the internal position (line, column) should be tracked an emitted in error messages. (Default: false
)allowDuplicateRdfIds
: By default multiple occurrences of the same rdf:ID
value are not allowed. By setting this option to true
, this uniqueness check can be disabled. (Default: false
)validateUri
: By default, the parser validates each URI. (Default: true
)iriValidationStrategy
: Allows to customize the used IRI validation strategy using the IriValidationStrategy
enumeration. IRI validation is handled by validate-iri.js. (Default: IriValidationStrategy.Pragmatic
)new RdfXmlParser({
dataFactory: require('@rdfjs/data-model'),
baseIRI: 'http://example.org/',
defaultGraph: namedNode('http://example.org/graph'),
strict: true,
trackPosition: true,
allowDuplicateRdfIds: true,
validateUri: true,
});
This software is written by Ruben Taelman.
This code is released under the MIT license.
v3.1.0 - 2025-07-01
<a name="v3.0.1"></a>
FAQs
Streaming RDF/XML parser
The npm package rdfxml-streaming-parser receives a total of 30,711 weekly downloads. As such, rdfxml-streaming-parser popularity was classified as popular.
We found that rdfxml-streaming-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.