Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: xmldom/xmldom
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 0.9.0-beta.3
Choose a base ref
Loading
...
head repository: xmldom/xmldom
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 0.9.0-beta.4
Choose a head ref
Loading
  • 8 commits
  • 60 files changed
  • 2 contributors

Commits on Oct 19, 2022

  1. style: Apply prettier to all code (#447)

    and merge eslint configs as far as possible.
    
    CodeQL discovered some new warnings after the formatting regading unused
    variables.
    I confirmed that all of them could be either fixed or be dismissed and
    applied the changes as part of this PR.
    
    Fixes #29 
    Fixes #130
    karfau authored Oct 19, 2022
    Configuration menu
    Copy the full SHA
    6601a11 View commit details
    Browse the repository at this point in the history
  2. chore: Add eslint-plugin-node for lib (#448)

    fixes #190
    karfau authored Oct 19, 2022
    Configuration menu
    Copy the full SHA
    75cf27e View commit details
    Browse the repository at this point in the history

Commits on Oct 22, 2022

  1. Configuration menu
    Copy the full SHA
    e4fbdf9 View commit details
    Browse the repository at this point in the history
  2. chore(deps): update dependency minimatch to 3.0.5 [security] (#450)

    [![Mend
    Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)
    
    This PR contains the following updates:
    
    | Package | Change |
    |---|---|
    | minimatch | [`3.0.4` ->
    `3.0.5`](https://renovatebot.com/diffs/npm/minimatch/3.0.4/3.0.5) |
    
    ### GitHub Vulnerability Alerts
    
    #### [CVE-2022-3517](https://nvd.nist.gov/vuln/detail/CVE-2022-3517)
    
    A vulnerability was found in the minimatch package. This flaw allows a
    Regular Expression Denial of Service (ReDoS) when calling the
    braceExpand function with specific arguments, resulting in a Denial of
    Service.
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
    schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click
    this checkbox.
    
    ---
    
    This PR has been generated by [Mend
    Renovate](https://www.mend.io/free-developer-tools/renovate/). View
    repository job log
    [here](https://app.renovatebot.com/dashboard#github/xmldom/xmldom).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzMi4yNDEuNyIsInVwZGF0ZWRJblZlciI6IjMyLjI0MS43In0=-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    renovate[bot] authored Oct 22, 2022
    Configuration menu
    Copy the full SHA
    829428f View commit details
    Browse the repository at this point in the history

Commits on Oct 23, 2022

  1. Configuration menu
    Copy the full SHA
    7c96a72 View commit details
    Browse the repository at this point in the history

Commits on Oct 29, 2022

  1. Merge pull request from GHSA-crh6-fp67-6883

    * fix: Report errors if DOM is not well-formed
    
    In case such a DOM would be created, the part that is not well formed will be transformed into text nodes, in which xml specific characters like `<` and `>` are encoded accordingly.
    
    This change can break your code, if you relied on this behavior, e.g. multiple root elements in the past.
    We consider it more important to align with the specs that we want to be aligned with,
    considering the potential security issues that might derive from people not being aware of the difference in behavior.
    
    Resolves GHSA-crh6-fp67-6883
    https://dom.spec.whatwg.org/#concept-node-ensure-pre-insertion-validity
    
    * fix: Prevent setting documentElement
    
    if node is not inserted and add missing `Document.ownerDocument`.
    karfau authored Oct 29, 2022
    Configuration menu
    Copy the full SHA
    52a7083 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    27fd112 View commit details
    Browse the repository at this point in the history
  3. 0.9.0-beta.4

    karfau committed Oct 29, 2022
    Configuration menu
    Copy the full SHA
    39bc1fc View commit details
    Browse the repository at this point in the history
Loading
Morty Proxy This is a proxified and sanitized view of the page, visit original site.