[Snyk] Upgrade xmldom from 0.1.27 to 0.6.0

[snyk-bot]

Snyk has created this PR to upgrade xmldom from 0.1.27 to 0.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 8 months ago, on 2021-04-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	484/1000 Why? Has a fix available, CVSS 5.4	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: xmldom

• 0.6.0 - 2021-04-17
  

  0.6.0

  Fixes

  • Stop serializing empty namespace values like xmlns:ds="" #168
    BREAKING CHANGE: If your code expected empty namespaces attributes to be serialized.
    Thank you @ pdecat and @ FranckDepoortere
  • Escape < to < when serializing attribute values #198 / #199
• 0.5.0 - 2021-03-09
• 0.4.0 - 2020-10-27
• 0.3.0 - 2020-03-04
• 0.2.1 - 2019-12-20
• 0.2.0 - 2019-12-20
• 0.1.31 - 2019-12-19
• 0.1.30 - 2019-12-19
• 0.1.29 - 2019-12-19
• 0.1.27 - 2016-11-28

from xmldom GitHub release notes

Commit messages

Package name: xmldom

• c80a161 xmldon version 0.6.0
• bc36efd chore: regenerate package-lock.json
• 8a92704 Update eslint -> ^7.23.0 - devDependencies ("Uncaught Error: define cannot be used indirect" when using jsonix in angular 6 highsource/jsonix#202)
• b12106e Update @ stryker-mutator/core -> ^4.5.1 - devDependencies (Element is not known in this context, could not determine its type, or trying to use marshaller. highsource/jsonix#192)
• af4642e docs: Update Changelog ([advice] How to use with schema repos, without Java highsource/jsonix#197)
• 5869d76 test(stryker): Replace line numbers by error index (Enclosing XML Tag Name Unavailable as Object Name When Unmarshaled highsource/jsonix#201)
• a681852 fix: Escape `<` when serializing attribute values (How to create, populate and marshal Javascript object from XSD? highsource/jsonix#199)
• bb12247 Update eslint-config-prettier -> 8 - devDependencies (Ignore unknown elements highsource/jsonix#187)
• 48c51b3 Update eslint -> ^7.22.0 - devDependencies (Unique Particle Attribution highsource/jsonix#185)
• 82b0481 refactor!: Avoid empty namespace value like xmlns:ds="" (Unmarshalled object to JSON? highsource/jsonix#168)
• fa67fcf chore: set version to 0.5.1-dev in package*.json
• f763b00 xmldom version 0.5.0
• d4201b9 Merge pull request from GHSA-h6q6-9hqw-rwfv
• a4d717c Update MDN links in readme.md (Question on how to extract SOAP body only. Similar to issue #168 highsource/jsonix#188)
• e984b3f Update @ stryker-mutator/core -> ^4.4.1 - devDependencies (Get Only the Mapping , but not in a JS file that exports but probably in a json or a variable  highsource/jsonix#184)
• c762161 Update stryker monorepo (major) (Issue #139 highsource/jsonix#140)
• fd47c51 Fix breaking preprocessors' directives when parsing attributes (define wrapper blocks webpack2 highsource/jsonix#171)
• baa67f5 Update xmltest -> ^1.5.0 - devDependencies (Element [ ] could not be unmarshalled as is not known in this context highsource/jsonix#182)
• 64c7388 fix(dom): Escape `]]>` when serializing CharData (Null properties are dropped during marshalling/unmarshalling with JSONIX highsource/jsonix#181)
• b73a965 Update eslint-config-prettier -> ^7.2.0 - devDependencies (Draft 06 converted jsonschemas highsource/jsonix#179)
• 21bc17e Switch to (only) MIT license (AJV JSON Schemas Draft 06 Support Update highsource/jsonix#178)
• ad773c9 test: Use toBe/toStrictEqual instead of toEqual (Add CDATA support highsource/jsonix#175)
• 23608d9 chore: Add karfau as contributor (Java based Validator for JSONIX schema highsource/jsonix#177)
• dbd2171 Export DOMException; remove custom assertions; etc. (Current status of the project highsource/jsonix#174)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs