twilio - npm Package Compare versions

Comparing version 1.1.1 to 1.1.2

lib/TwimlResponse.js

 var _ = require('underscore');
 
+// Escape XML entites in a given string
+function esc(str) {
+    return String(str).replace(/&/g, '&')
+        .replace(/\"/g, '"')
+        .replace(/\'/g, ''')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+
 //helper to generate a helper function which returns XML node for a given parent
@@ -87,3 +96,3 @@ function addTwimlFunction(node, twimlName) {
     for (var attr in this.attributes) {
-        buffer.push(' ' + attr + '="' + this.attributes[attr] + '"');
+        buffer.push(' ' + attr + '="' + esc(this.attributes[attr]) + '"');
     }
@@ -96,3 +105,3 @@
     if (this.text) {
-        buffer.push(this.text);
+        buffer.push(esc(this.text));
     }
@@ -99,0 +108,0 @@ else {

package.json

 {
     "name":"twilio",
     "description":"A Twilio helper library",
-    "version":"1.1.1",
+    "version":"1.1.2",
     "author":"Kevin Whinnery <[e-mail]>",
@@ -6,0 +6,0 @@ "contributors":[

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

42147

increased by0.6%

Lines of code

784

increased by1.03%

No dependency changes