8000 Comparing 0.7.5...0.7.8 · xmldom/xmldom · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: xmldom/xmldom
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0.7.5
Choose a base ref
...
head repository: xmldom/xmldom
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 0.7.8
Choose a head ref
  • 8 commits
  • 10 files changed
  • 2 contributors

Commits on Oct 16, 2022

  1. fix: Backport PR-437 to 0.7.x branch

    jftanner authored and karfau committed Oct 16, 2022
    Configuration menu
    Copy the full SHA
    1f20aee View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    b28e631 View commit details
    Browse the repository at this point in the history
  3. 0.7.6

    karfau committed Oct 16, 2022
    Configuration menu
    Copy the full SHA
    3ca016d View commit details
    Browse the repository at this point in the history

Commits on Oct 29, 2022

  1. Merge pull request from GHSA-crh6-fp67-6883

    * fix: Prevent inserting DOM nodes when they are not well-formed
    
    In case such a DOM would be created, the part that is not well formed will be transformed into text nodes, in which xml specific characters like `<` and `>` are encoded accordingly.
    In the upcoming version 0.9.0 those text nodes will no longer be added an an error will be thrown instead.
    
    This change can break your code, if you relied on this behavior, e.g. multiple root elements in the past. We consider it more important to align with the specs that we want to be aligned with, considering the potential security issues that might derive from people not being aware of the difference in behavior.
    
    Resolves GHSA-crh6-fp67-6883
    
    Related Spec: https://dom.spec.whatwg.org/#concept-node-ensure-pre-insertion-validity
    
    * fix: Prevent setting documentElement
    
    if node is not inserted.
    karfau authored Oct 29, 2022
    Configuration menu
    Copy the full SHA
    c02f786 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8a3173d View commit details
    Browse the repository at this point in the history
  3. 0.7.7

    karfau committed Oct 29, 2022
    Configuration menu
    Copy the full SHA
    fe5b043 View commit details
    Browse the repository at this point in the history

Commits on Oct 31, 2022

  1. fix: Restore ES5 compatibility (#452)

    by adding a ponyfill for `Array.prototype.find` to conventions
    and converting `let` to `var`
    karfau committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    74e25a6 View commit details
    Browse the repository at this point in the history
  2. 0.7.8

    karfau committed Oct 31, 2022
    Configuration menu
    Copy the full SHA
    0d6e3a1 View commit details
    Browse the repository at this point in the history
Loading
0