svg-parser - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

CHANGELOG.md

 # svg-parser changelog
 
+## 1.0.3
+
+* Prevent infinite loops on bad final closing tag
+
 ## 1.0.2
@@ -4,0 +8,0 @@

dist/svg-parser.es.js

@@ -116,3 +116,3 @@ function getLocator ( source ) {
 		var attribute;
-		while ( attribute = getAttribute() ) {
+		while ( i < source.length && ( attribute = getAttribute() ) ) {
 			element.attributes[ attribute.name ] = attribute.value;
@@ -167,3 +167,3 @@ }
 		var name = '';
-		while ( validNameCharacters.test( source[i] ) ) name += source[ i++ ];
+		while ( i < source.length && validNameCharacters.test( source[i] ) ) name += source[ i++ ];
 
@@ -237,3 +237,3 @@ return name;
 	function allowSpaces () {
-		while ( whitespace.test( source[i] ) ) i += 1;
+		while ( i < source.length && whitespace.test( source[i] ) ) i += 1;
 	}
@@ -240,0 +240,0 @@

dist/svg-parser.umd.js

@@ -122,3 +122,3 @@ (function (global, factory) {
 			var attribute;
-			while ( attribute = getAttribute() ) {
+			while ( i < source.length && ( attribute = getAttribute() ) ) {
 				element.attributes[ attribute.name ] = attribute.value;
@@ -173,3 +173,3 @@ }
 			var name = '';
-			while ( validNameCharacters.test( source[i] ) ) name += source[ i++ ];
+			while ( i < source.length && validNameCharacters.test( source[i] ) ) name += source[ i++ ];
 
@@ -243,3 +243,3 @@ return name;
 		function allowSpaces () {
-			while ( whitespace.test( source[i] ) ) i += 1;
+			while ( i < source.length && whitespace.test( source[i] ) ) i += 1;
 		}
@@ -246,0 +246,0 @@

package.json

 {
   "name": "svg-parser",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Create a JSON-friendly object from an SVG string",
@@ -5,0 +5,0 @@ "main": "dist/svg-parser.umd.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12234

increased by1.62%

No dependency changes