xfc - npm Package Compare versions

Comparing version 1.8.0 to 1.8.1

CHANGELOG.md

 Next Release
 -------------
+
+1.8.1
+------
+* Conditionally remove hasAttribute so it doesn't break on non-elements in IE10.  #44
+
 1.8.0
@@ -4,0 +9,0 @@ ------

lib/provider/application.js

@@ -379,3 +379,3 @@ 'use strict';
 
-      if (!element || !(element.hasAttribute('download') || protocols.test(element.href))) {
+      if (!element || !(element.hasAttribute && element.hasAttribute('download') || protocols.test(element.href))) {
         this.JSONRPC.notification('unload');
@@ -382,0 +382,0 @@ this.trigger('xfc.unload');

lib/provider/provider.js

@@ -38,3 +38,3 @@ 'use strict';
       // Set hidden attribute with script if not present and security is being enforced
-      if (enforceSecurity && window.self !== window.top && !document.documentElement.hasAttribute('hidden')) {
+      if (enforceSecurity && window.self !== window.top && !(document.documentElement.hasAttribute && document.documentElement.hasAttribute('hidden'))) {
         document.documentElement.setAttribute('hidden', null);
@@ -41,0 +41,0 @@

package.json

 {
   "name": "xfc",
-  "version": "1.8.0",
+  "version": "1.8.1",
   "description": "A Cross Frame Container that handles securely embedding web content into a 3rd party domain",
@@ -20,2 +20,3 @@ "author": "Cerner Corporation",
     "lint-js": "eslint 'src/**/*.js' --fix",
+    "prepare": "npm run build-es5 && npm run build-webpack",
     "test": "mocha --compilers js:babel-core/register --recursive"
@@ -22,0 +23,0 @@ },

src/provider/application.js

@@ -9,3 +9,2 @@ import JSONRPC from 'jsonrpc-dispatch';
 
-
 /** Application class which represents an embedded application. */
@@ -277,3 +276,3 @@ class Application extends EventEmitter {
 
-    if (!element || !(element.hasAttribute('download') || protocols.test(element.href))) {
+    if (!element || !(element.hasAttribute && element.hasAttribute('download') || protocols.test(element.href))) {
       this.JSONRPC.notification('unload');
@@ -280,0 +279,0 @@ this.trigger('xfc.unload');

src/provider/provider.js

@@ -9,3 +9,3 @@ import Application from './application';
     // Set hidden attribute with script if not present and security is being enforced
-    if (enforceSecurity && window.self !== window.top && !document.documentElement.hasAttribute('hidden')) {
+    if (enforceSecurity && window.self !== window.top && !(document.documentElement.hasAttribute && document.documentElement.hasAttribute('hidden'))) {
       document.documentElement.setAttribute('hidden', null);
@@ -12,0 +12,0 @@

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

88161

increased by0.34%

No dependency changes