@library-pals/isbn 1.3.1 → 1.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@library-pals/isbn",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "Find books by ISBN",
   "exports": "./src/index.js",
   "types": "./src/index.d.ts",
@@ -44,9 +44,7 @@
     "typescript": "^5.4.5"
   },
   "dependencies": {
-    "axios": "^1.6.8",
-    "string-strip-html": "^13.4.8",
-    "xss": "^1.0.15"
+    "axios": "^1.6.8"
   },
   "bugs": {
     "url": "https://github.com/library-pals/isbn/issues"

package/src/providers/librofm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"librofm.d.ts","sourceRoot":"","sources":["librofm.js"],"names":[],"mappings":"AAKA;;;GAGG;AAEH;;;;;GAKG;AACH,qCAJW,MAAM,GACJ,QAAQ,IAAI,CAAC,CAezB;AAED;;;;;;GAMG;AACH,kCALW,MAAM,QACN,MAAM,OACN,MAAM,GACJ,QAAQ,IAAI,CAAC,CAgCzB;AAED;;;GAGG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;GAIG;AACH,+CAHW,MAAM,GACJ,MAAM,CAkBlB;mBA5GY,OAAO,aAAa,EAAE,IAAI;iCAC1B,OAAO,OAAO,EAAE,kBAAkB;;;;;UAgEjC,MAAM;;;;;;SAIN,MAAM;;;;gBACN,MAAM;;;;UACN,MAAM;;;;iBACN,MAAM;;;;UACN,MAAM;;;;WACN,MAAM;;;;cACN,MAAM;;;;YACN,MAAM,EAAE;;;;YACR,MAAM,EAAE;;;;eACR,MAAM;;;;mBACN,MAAM;;;;gBACN,MAAM;;;;cACN,MAAM;;;;oBACN,MAAM,EAAE;;;;YACR,MAAM;;;;iBACN,MAAM"}
+{"version":3,"file":"librofm.d.ts","sourceRoot":"","sources":["librofm.js"],"names":[],"mappings":"AAGA;;;GAGG;AAEH;;;;;GAKG;AACH,qCAJW,MAAM,GACJ,QAAQ,IAAI,CAAC,CAezB;AAED;;;;;;GAMG;AACH,kCALW,MAAM,QACN,MAAM,OACN,MAAM,GACJ,QAAQ,IAAI,CAAC,CAgCzB;AAED;;;GAGG;AACH;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;GAIG;AACH,+CAHW,MAAM,GACJ,MAAM,CAiBlB;mBA3GY,OAAO,aAAa,EAAE,IAAI;iCAC1B,OAAO,OAAO,EAAE,kBAAkB;;;;;UAgEjC,MAAM;;;;;;SAIN,MAAM;;;;gBACN,MAAM;;;;UACN,MAAM;;;;iBACN,MAAM;;;;UACN,MAAM;;;;WACN,MAAM;;;;cACN,MAAM;;;;YACN,MAAM,EAAE;;;;YACR,MAAM,EAAE;;;;eACR,MAAM;;;;mBACN,MAAM;;;;gBACN,MAAM;;;;cACN,MAAM;;;;oBACN,MAAM,EAAE;;;;YACR,MAAM;;;;iBACN,MAAM"}

package/src/providers/librofm.js

@@ -1,7 +1,5 @@
 import { LIBROFM_API_BASE, LIBROFM_API_BOOK } from "../provider-resolvers.js";
 import axios from "axios";
-import xss from "xss";
-import { stripHtml } from "string-strip-html";
 
 /**
  * @typedef {import('../index.js').Book} Book
@@ -98,15 +96,14 @@ export async function standardize(data, isbn, url) {
  */
 export function formatDescription(description) {
   if (!description) return "";
-  description = xss(description);
   // Replace <br> with a space
   description = description.replaceAll("<br>", " ");
   // Replace <b>—</b> with a dash
   description = description.replaceAll("<b>—</b>", "—");
   // Remove bold tags and contents
   description = description.replaceAll(/<b>.*?<\/b>/g, "");
-  // Remove all other html elements
-  description = stripHtml(description).result;
+  // Strip HTML tags
+  description = stripHtmlTags(description);
   // Trim
   description = description.trim();
   // Remove extra spaces
@@ -135,3 +132,27 @@ function extractGenres(text) {
 
   return genres;
 }
+
+/**
+ * Encodes HTML special characters to prevent XSS attacks.
+ * @param {string} string - The string to encode.
+ * @returns {string} - The encoded string.
+ */
+function encodeHTML(string) {
+  return string
+    .replaceAll("&", "&amp;")
+    .replaceAll("<", "&lt;")
+    .replaceAll(">", "&gt;")
+    .replaceAll('" ', "” ")
+    .replaceAll(' "', "“ ")
+    .replaceAll("'", "&#39;");
+}
+
+/**
+ * Removes HTML tags from a string and encodes it to prevent XSS attacks.
+ * @param {string} string - The string from which to remove HTML tags.
+ * @returns {string} - The sanitized string without HTML tags.
+ */
+function stripHtmlTags(string) {
+  return encodeHTML(string.replaceAll(/<\/?[^>]+(>|$)/g, ""));
+}