strophe.js - npm Package Compare versions

Comparing version 1.3.1 to 1.3.2

CHANGELOG.md

 # Strophe.js Change Log
 
+## Version 1.3.2 - (2019-03-21)
+
+* #320 Fix error on SCRAM-SHA-1 client nonce generation
+
 ## Version 1.3.1 - (2018-11-15)
@@ -4,0 +8,0 @@

package.json

 {
   "name": "strophe.js",
   "description": "Strophe.js is an XMPP library for JavaScript",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "homepage": "http://strophe.im/strophejs",
@@ -6,0 +6,0 @@ "repository": {

src/md5.js

@@ -17,5 +17,5 @@ /*
  */
-var safe_add = function (x, y) {
-    var lsw = (x & 0xFFFF) + (y & 0xFFFF);
-    var msw = (x >> 16) + (y >> 16) + (lsw >> 16);
+const safe_add = function (x, y) {
+    const lsw = (x & 0xFFFF) + (y & 0xFFFF);
+    const msw = (x >> 16) + (y >> 16) + (lsw >> 16);
     return (msw << 16) | (lsw & 0xFFFF);
@@ -27,3 +27,3 @@ };
  */
-var bit_rol = function (num, cnt) {
+const bit_rol = function (num, cnt) {
     return (num << cnt) | (num >>> (32 - cnt));
@@ -35,5 +35,8 @@ };
  */
-var str2binl = function (str) {
-    var bin = [];
-    for(var i = 0; i < str.length * 8; i += 8)
+const str2binl = function (str) {
+    if (typeof str !== "string") {
+        throw new Error("str2binl was passed a non-string");
+    }
+    const bin = [];
+    for(let i = 0; i < str.length * 8; i += 8)
     {
@@ -48,5 +51,5 @@ bin[i>>5] |= (str.charCodeAt(i / 8) & 255) << (i%32);
  */
-var binl2str = function (bin) {
-    var str = "";
-    for(var i = 0; i < bin.length * 32; i += 8)
+const binl2str = function (bin) {
+    let str = "";
+    for(let i = 0; i < bin.length * 32; i += 8)
     {
@@ -61,6 +64,6 @@ str += String.fromCharCode((bin[i>>5] >>> (i % 32)) & 255);
  */
-var binl2hex = function (binarray) {
-    var hex_tab = "0123456789abcdef";
-    var str = "";
-    for(var i = 0; i < binarray.length * 4; i++)
+const binl2hex = function (binarray) {
+    const hex_tab = "0123456789abcdef";
+    let str = "";
+    for(let i = 0; i < binarray.length * 4; i++)
     {
@@ -76,19 +79,19 @@ str += hex_tab.charAt((binarray[i>>2] >> ((i%4)*8+4)) & 0xF) +
  */
-var md5_cmn = function (q, a, b, x, s, t) {
+const md5_cmn = function (q, a, b, x, s, t) {
     return safe_add(bit_rol(safe_add(safe_add(a, q),safe_add(x, t)), s),b);
 };
 
-var md5_ff = function (a, b, c, d, x, s, t) {
+const md5_ff = function (a, b, c, d, x, s, t) {
     return md5_cmn((b & c) | ((~b) & d), a, b, x, s, t);
 };
 
-var md5_gg = function (a, b, c, d, x, s, t) {
+const md5_gg = function (a, b, c, d, x, s, t) {
     return md5_cmn((b & d) | (c & (~d)), a, b, x, s, t);
 };
 
-var md5_hh = function (a, b, c, d, x, s, t) {
+const md5_hh = function (a, b, c, d, x, s, t) {
     return md5_cmn(b ^ c ^ d, a, b, x, s, t);
 };
 
-var md5_ii = function (a, b, c, d, x, s, t) {
+const md5_ii = function (a, b, c, d, x, s, t) {
     return md5_cmn(c ^ (b | (~d)), a, b, x, s, t);
@@ -100,3 +103,3 @@ };
  */
-var core_md5 = function (x, len) {
+const core_md5 = function (x, len) {
     /* append padding */
@@ -106,9 +109,9 @@ x[len >> 5] |= 0x80 << ((len) % 32);
 
-    var a =  1732584193;
-    var b = -271733879;
-    var c = -1732584194;
-    var d =  271733878;
+    let a =  1732584193;
+    let b = -271733879;
+    let c = -1732584194;
+    let d =  271733878;
 
-    var olda, oldb, oldc, oldd;
-    for (var i = 0; i < x.length; i += 16)
+    let olda, oldb, oldc, oldd;
+    for (let i = 0; i < x.length; i += 16)
     {
@@ -115,0 +118,0 @@ olda = a;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Improved metrics

Lines of code

10288

increased by0.06%

Worsened metrics

Total package byte prevSize

583023

decreased by-20.18%

Number of package files

16

decreased by-15.79%

No dependency changes