sax
Advanced tools
Comparing version 0.2.4 to 0.2.5
@@ -39,3 +39,5 @@ // wrapper for non-node envs | ||
if (this.opt.xmlns) this.ns = {} // NS bindings stacks: prefix -> [uri, uri...] | ||
if (this.opt.xmlns) this.ns = { | ||
"xml": ["http://www.w3.org/XML/1998/namespace"] | ||
} // NS bindings stacks: prefix -> [uri, uri...] | ||
@@ -357,5 +359,9 @@ // mostly just for error reporting | ||
var prefix = n == "xmlns" ? "" : qn.local | ||
parser.ns[prefix] = parser.ns[prefix] || [] | ||
parser.ns[prefix].unshift(parser.attribValue) | ||
parser.tag.bindings.push(prefix) | ||
if(prefix === "xml" && parser.attribValue !== "http://www.w3.org/XML/1998/namespace") { | ||
strictFail(parser, "Cannot bind the xml prefix to " + parser.attribValue) | ||
} else { | ||
parser.ns[prefix] = parser.ns[prefix] || [] | ||
parser.ns[prefix].unshift(parser.attribValue) | ||
parser.tag.bindings.push(prefix) | ||
} | ||
} | ||
@@ -362,0 +368,0 @@ |
{ "name" : "sax" | ||
, "description": "An evented streaming XML parser in JavaScript" | ||
, "author" : "Isaac Z. Schlueter <i@izs.me>" | ||
, "version" : "0.2.4" | ||
, "version" : "0.2.5" | ||
, "main" : "lib/sax" | ||
@@ -6,0 +6,0 @@ , "license" : "MIT" |
Sorry, the diff of this file is not supported yet
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Non-existent author
Supply chain riskThe package was published by an npm account that no longer exists.
Found 1 instance in 1 package
146530
36
1607
0
28
1