Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update fast-xml-parser to 4.2.4 #344

Merged
merged 1 commit into from
Jun 18, 2023

Conversation

mxsph
Copy link
Contributor

@mxsph mxsph commented Jun 17, 2023

This PR updates fast-xml-parser to the latest version to fix the GHSA-6w63-h3fj-q4vw and GHSA-x3cc-x39p-42qx security vulnerabilities.

Explanation of the migration steps taken:

  • The XMLParser is now a class that takes the options on creation (see release notes).
  • ignoreNameSpace has been renamed to removeNSPrefix (see release notes)
  • the parseTrueNumberOnly option has been removed and the following code is the equivalent option (see docs)
    numberParseOptions: {
        hex: true,
        leadingZeros: false
    }  
  • supresEmptyNode has been renamed to supressEmptyNode (see release notes).
  • The arrayMode option has been removed and replaced with isArray, since it is now a function that can be used to determine if a node is an array, if you omit the function the behavior is the same as before with arrayMode: false.
  • j2xParser has been renamed to XMLBuilder (see release notes).

resolves #336

@perry-mitchell
Copy link
Owner

This is awesome, thank you!

@perry-mitchell perry-mitchell merged commit 229f185 into perry-mitchell:master Jun 18, 2023
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Vulnerability in fast-xml-parser
2 participants