Changelog
0.5.0
Avoid misinterpretation of malicious XML input - GHSA-h6q6-9hqw-rwfv
(CVE-2021-21366)
Improve error reporting; throw on duplicate attribute
BREAKING CHANGE: It is currently not clear how to consistently deal with duplicate attributes, so it's also safer for our users to fail when detecting them.
It's possible to configure the DOMParser.errorHandler
before parsing, to handle those errors differently.
To accomplish this and also be able to verify it in tests I needed to
Error
type ParseError
and export itParseError
from errorHandler.fatalError
and prevent those from being caught in XMLReader
.DOMHandler
constructor as __DOMHandler
Preserve quotes in DOCTYPE declaration
Since the only purpose of parsing the DOCTYPE is to be able to restore it when serializing, we decided that it would be best to leave the parsed publicId
and systemId
as is, including any quotes.
BREAKING CHANGE: If somebody relies on the actual unquoted values of those ids, they will need to take care of either single or double quotes and the right escaping.
(Without this change this would not have been possible because the SAX parser already dropped the information about the quotes that have been used in the source.)
https://www.w3.org/TR/2006/REC-xml11-20060816/#dtd https://www.w3.org/TR/2006/REC-xml11-20060816/#IDAX1KS (External Entity Declaration)
Fix breaking preprocessors' directives when parsing attributes #171
fix(dom): Escape ]]>
when serializing CharData #181
Switch to (only) MIT license (drop problematic LGPL license option) #178
Export DOMException; remove custom assertions; etc. #174
readme.md
#188
Changelog
0.4.0
behavior from v0.1.27 #67
#113
#156
#144
#91
#84
#66
#63
#78
#104
#79
#81
#70
#77
#64
#106
#107
vows
tests, drop proof
tests #59
#114
xmltest
cases #112
#108
#86
Changelog
0.3.0
component.json
(deprecated package manager https://github.com/componentjs/guide)lib
subdirectory.files
entry in package.json
and remove use of .npmignore
.Document.getElementsByClassName
.Node
to the list of exportsentityMap
.Changelog
0.2.0
xmldom-alpha@v0.1.28
by the original authors.Object.create
check from the _extends
method of dom.js
that added a __proto__
property ().__proto__
propertypackage.json
Changelog
0.1.31
The patch versions (v0.1.29
- v0.1.31
) that have been released on the v0.1.x branch, to reflect the changed maintainers, are branched off from v0.1.27
so they don't include the breaking changes introduced in xmldom-alpha@v0.1.28
:
After the last commit to the original repository https://github.com/jindw/xmldom on the 9th of May 2017, the first commit to https://github.com/xmldom/xmldom is from the 19th of December 2019. The fork has been announced in the original repository on the 2nd of March 2020.
The versions listed below have been published to one or both of the following packages:
It is currently not planned to continue publishing the xmldom-alpha
package.
The new maintainers did not invest time to understand changes that led to the last xmldom
version 0.1.27
published by the original maintainer, but consider it the basis for their work.
A timeline of all the changes that happened from that version until 0.3.0
is available in https://github.com/xmldom/xmldom/issues/62. Any related questions should be asked there.