bump xmldom to resolve https://nvd.nist.gov/vuln/detail/CVE-2022-39299

ArchGPT · Oct 3, 2023 · 566de38 · 566de38
1 parent dad9af9
commit 566de38
Show file tree

Hide file tree

Showing 5 changed files with 12 additions and 17 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -11,7 +11,7 @@
   },
   "homepage": "https://github.com/ArchGPT/insomnium#readme",
   "engines": {
-    "node": ">=18.15 <20",
+    "node": ">=18.17.0",
     "npm": ">=8.19.0"
   },
   "workspaces": [
@@ -71,5 +71,8 @@
     "tslib": "2.0.1",
     "type-fest": "^2.12.0",
     "typescript": "^5.1.6"
+  },
+  "dependencies": {
+    "@xmldom/xmldom": "^0.8.10"
   }
 }
diff --git a/packages/insomnia/package.json b/packages/insomnia/package.json
@@ -181,7 +181,7 @@
     "vite": "^4.4.7",
     "vkbeautify": "^0.99.1",
     "ws": "^8.13.0",
-    "xmldom": "^0.6.0",
+
     "xpath": "0.0.32"
   },
   "dev": {

diff --git a/packages/insomnia/src/ui/components/templating/local-template-tags.ts b/packages/insomnia/src/ui/components/templating/local-template-tags.ts
@@ -707,7 +707,7 @@ const localTemplatePlugins: { templateTag: PluginTemplateTag }[] = [
               return results[0];
             }
           } else {
-            const DOMParser = (await import('xmldom')).DOMParser;
+            const DOMParser = (await import('@xmldom/xmldom')).DOMParser;
             const dom = new DOMParser().parseFromString(body);
             let selectedValues: SelectedValue[] = [];
             if (sanitizedFilter === undefined) {

diff --git a/packages/insomnia/src/utils/xpath/query.ts b/packages/insomnia/src/utils/xpath/query.ts
@@ -1,4 +1,4 @@
-import { DOMParser } from 'xmldom';
+import { DOMParser } from '@xmldom/xmldom';
 import xpath, { SelectedValue } from 'xpath';
 
 /**