Skip to content

Releases: HenrikJoreteg/html-parse-stringify

Fix reported ReDos vulnerability

26 Feb 18:40
Compare
Choose a tag to compare

See changelog in readme for details.

In short, if you sent it <!'''''''''''''''''''''''''''''''''''''''''! it would hang the parser. The fix was a change to the regex for parsing tags also added corresponding tests.

v1.0.3

03 Oct 09:57
Compare
Choose a tag to compare
Wrote TypeScript definitions for `html-parse-stringify` (#11)