Bump xmldom to 0.8.0 (#181)

Switching from package `xmldom` to `@xmldom/xmldom`, which resolves the security issue present in latest xmldom version 0.6.0:
GHSA-5fg8-2547-mr8q

The reason is that the maintainers were forced to switch to a scoped package since 0.7.0:
 xmldom/xmldom#271

- I used node 12 to run `npm install`.
- I executed `npm run test` on my machine without failure

package.json

@@ -29,6 +29,7 @@
   "homepage": "https://monaca.io",
   "preferGlobal": true,
   "dependencies": {
+    "@xmldom/xmldom": "^0.8.0",
     "colors": "^0.6.2",
     "compare-versions": "3.0.1",
     "inquirer": "^6.2.2",
@@ -40,8 +41,7 @@
     "portfinder": "^1.0.7",
     "q": "^1.1.2",
     "shelljs": "^0.8.4",
-    "tar": "^5.0.5",
-    "xmldom": "^0.6.0"
+    "tar": "^5.0.5"
   },
   "devDependencies": {
     "jest": "^24.9.0"

src/cordova-cli-overrides/get-plugin-name-from-xml.js

@@ -1,8 +1,8 @@
-const XMLDom = require('xmldom').DOMParser;
+const XMLDom = require('@xmldom/xmldom').DOMParser;
 
 const getPluginNameFromXml = xml => {
  const doc = new XMLDom().parseFromString(xml, 'application/xml');
  return doc.getElementsByTagName('plugin')[0].getAttribute('id');
 }
 
-module.exports = getPluginNameFromXml;
+module.exports = getPluginNameFromXml;

src/cordova-cli-overrides/npm-utils.js

@@ -1,7 +1,7 @@
 const exec = require('child_process').exec;
 const request = require('request');
 const tar = require('tar');
-const XMLDom = require('xmldom').DOMParser;
+const XMLDom = require('@xmldom/xmldom').DOMParser;
 
 
 const getPluginId = async (pkgname) => {

src/create.js

@@ -7,8 +7,8 @@ var fs = require('fs'),
   Q = require('q'),
   inquirer = null,
   argv = require('optimist').argv,
-  XMLDom = require('xmldom').DOMParser,
-  XMLSerializer = require('xmldom').XMLSerializer,
+  XMLDom = require('@xmldom/xmldom').DOMParser,
+  XMLSerializer = require('@xmldom/xmldom').XMLSerializer,
   serializer = new XMLSerializer(),
   Monaca = require('monaca-lib').Monaca,
   util = require(path.join(__dirname, 'util')),