sanitize-html - npm Package Compare versions

Comparing version 1.21.1 to 1.22.0

CHANGELOG.md

 ## Changelog
 
+1.22.0: bumped `htmlparser2` dependency to the 4.x series. This fixes longstanding bugs and should cause no bc breaks for this module, since the only bc breaks upstream are in regard to features we don't expose in this module.
+
 1.21.1: fixed issue with bad `main` setting in package.json that broke 1.21.0.
@@ -4,0 +6,0 @@

package.json

 {
   "name": "sanitize-html",
-  "version": "1.21.1",
+  "version": "1.22.0",
   "description": "Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis",
@@ -31,3 +31,3 @@ "main": "dist/sanitize-html.js",
     "chalk": "^2.4.1",
-    "htmlparser2": "^3.10.0",
+    "htmlparser2": "^4.1.0",
     "lodash.clonedeep": "^4.5.0",
@@ -38,15 +38,15 @@ "lodash.escaperegexp": "^4.1.2",
     "lodash.mergewith": "^4.6.1",
-    "postcss": "^7.0.5",
-    "srcset": "^1.0.0",
+    "postcss": "^7.0.27",
+    "srcset": "^2.0.1",
     "xtend": "^4.0.1"
   },
   "devDependencies": {
+    "@babel/cli": "^7.8.4",
+    "@babel/core": "^7.8.4",
+    "@babel/preset-env": "^7.8.4",
     "babelify": "^10.0.0",
     "browserify": "^16.2.3",
     "mocha": "^5.2.0",
-    "uglify-js": "^3.4.9",
-    "@babel/cli": "^7.6.0",
-    "@babel/core": "^7.6.0",
-    "@babel/preset-env": "^7.6.0"
+    "uglify-js": "^3.8.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

1616592

decreased by-6.84%

Lines of code

27317

decreased by-2.36%

Dependency changes

• + Addeddom-serializer@1.4.1(transitive)

• + Addeddomhandler@3.3.04.3.1(transitive)

• + Addeddomutils@2.8.0(transitive)

• + Addedhtmlparser2@4.1.0(transitive)

• + Addedsrcset@2.0.1(transitive)

• - Removedarray-uniq@1.0.3(transitive)

• - Removeddom-serializer@0.2.2(transitive)

• - Removeddomelementtype@1.3.1(transitive)

• - Removeddomhandler@2.4.2(transitive)

• - Removeddomutils@1.7.0(transitive)

• - Removedentities@1.1.2(transitive)

• - Removedhtmlparser2@3.10.1(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removednumber-is-nan@1.0.1(transitive)

• - Removedreadable-stream@3.6.2(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsrcset@1.0.0(transitive)

• - Removedstring_decoder@1.3.0(transitive)

• - Removedutil-deprecate@1.0.2(transitive)

• Updatedhtmlparser2@^4.1.0

• Updatedpostcss@^7.0.27

• Updatedsrcset@^2.0.1