Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

validator

Package Overview
Dependencies
Maintainers
1
Versions
211
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

validator - npm Package Compare versions

Comparing version 0.4.4 to 0.4.5

4

lib/xss.js

@@ -131,3 +131,3 @@ //This module is adapted from the CodeIgniter framework

//handler and anything up to the closing >, but it's unlikely to be a problem.
event_handlers = ['[^a-z_\-]on\\w*'];
var event_handlers = ['[^a-z_\-]on\\w*'];

@@ -147,3 +147,3 @@ //Adobe Photoshop puts XML metadata into JFIF images, including namespacing,

//Becomes: <blink>
naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';
var naughty = 'alert|applet|audio|basefont|base|behavior|bgsound|blink|body|embed|expression|form|frameset|frame|head|html|ilayer|iframe|input|isindex|layer|link|meta|object|plaintext|style|script|textarea|title|video|xml|xss';
str = str.replace(new RegExp('<(/*\\s*)('+naughty+')([^><]*)([><]*)', 'gi'), function(m, a, b, c, d) {

@@ -150,0 +150,0 @@ return '&lt;' + a + b + c + d.replace('>','&gt;').replace('<','&lt;');

{ "name" : "validator",
"description" : "Data validation, filtering and sanitization for node.js",
"version" : "0.4.4",
"version" : "0.4.5",
"homepage" : "http://github.com/chriso/node-validator",

@@ -5,0 +5,0 @@ "keywords" : ["validator", "validation", "assert", "params", "sanitization", "xss", "entities", "sanitize", "sanitisation", "input"],

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc