@scalar/helpers 0.2.6 → 0.2.8

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @scalar/helpers
 
+## 0.2.8
+
+### Patch Changes
+
+- [#7751](https://github.com/scalar/scalar/pull/7751): fix: auth persistence
+
+## 0.2.7
+
+### Patch Changes
+
+- [#7720](https://github.com/scalar/scalar/pull/7720): feat: escape XML in json2xml
+
 ## 0.2.6
 
 ### Patch Changes

package/dist/file/json2xml.d.ts

@@ -1,5 +1,6 @@
 /**
  * This function converts an object to XML.
+ * Values are automatically escaped to prevent XML injection attacks.
  */
 export declare function json2xml(data: Record<string, any>, options?: {
     indent?: string;

package/dist/file/json2xml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json2xml.d.ts","sourceRoot":"","sources":["../../src/file/json2xml.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,cAAc,CAAC,EAAE,OAAO,CAAA;CACpB,UAyEP"}
+{"version":3,"file":"json2xml.d.ts","sourceRoot":"","sources":["../../src/file/json2xml.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,OAAO,GAAE;IACP,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,cAAc,CAAC,EAAE,OAAO,CAAA;CACpB,UA2EP"}

package/dist/file/json2xml.js

@@ -1,3 +1,13 @@
+const XML_ESCAPE_MAP = {
+  "&": "&",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&apos;"
+};
+function escapeXml(str) {
+  return str.replace(/[&<>"']/g, (char) => XML_ESCAPE_MAP[char] ?? char);
+}
 function json2xml(data, options = {}) {
   const { indent = "  ", format = true, xmlDeclaration = true } = options;
   const toXml = (value, key, currentIndent) => {
@@ -12,20 +22,21 @@ function json2xml(data, options = {}) {
       let children = "";
       for (const attr in value) {
         if (attr.charAt(0) === "@") {
-          attributes += " " + attr.substr(1) + '="' + value[attr].toString() + '"';
+          attributes += " " + attr.substr(1) + '="' + escapeXml(value[attr].toString()) + '"';
         }
       }
       for (const child in value) {
         if (child === "#text") {
-          children += value[child];
+          children += escapeXml(value[child]?.toString() ?? "");
         } else if (child === "#cdata") {
-          children += "<![CDATA[" + value[child] + "]]>";
+          const cdataContent = value[child]?.toString() ?? "";
+          children += "<![CDATA[" + cdataContent.replace(/]]>/g, "]]]]><![CDATA[>") + "]]>";
         } else if (child.charAt(0) !== "@") {
           hasChild = true;
           children += toXml(value[child], child, currentIndent + indent);
         }
       }
-      if (hasChild) {
+      if (hasChild || children) {
         xml2 += currentIndent + "<" + key + attributes + ">\n";
         xml2 += children;
         xml2 += currentIndent + "</" + key + ">\n";
@@ -33,7 +44,7 @@ function json2xml(data, options = {}) {
         xml2 += currentIndent + "<" + key + attributes + "/>\n";
       }
     } else {
-      xml2 += currentIndent + "<" + key + ">" + (value?.toString() || "") + "</" + key + ">\n";
+      xml2 += currentIndent + "<" + key + ">" + escapeXml(value?.toString() || "") + "</" + key + ">\n";
     }
     return xml2;
   };

package/dist/file/json2xml.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/file/json2xml.ts"],
-  "sourcesContent": ["/**\n * This function converts an object to XML.\n */\nexport function json2xml(\n  data: Record<string, any>,\n  options: {\n    indent?: string\n    format?: boolean\n    xmlDeclaration?: boolean\n  } = {},\n) {\n  const { indent = '  ', format = true, xmlDeclaration = true } = options\n\n  const toXml = (value: any, key: string, currentIndent: string): string => {\n    let xml = ''\n\n    if (Array.isArray(value)) {\n      for (let i = 0, n = value.length; i < n; i++) {\n        xml += toXml(value[i], key, currentIndent)\n      }\n    } else if (typeof value === 'object' && value !== null) {\n      let hasChild = false\n      let attributes = ''\n      let children = ''\n\n      // Handle attributes (keys starting with @)\n      for (const attr in value) {\n        if (attr.charAt(0) === '@') {\n          attributes += ' ' + attr.substr(1) + '=\"' + value[attr].toString() + '\"'\n        }\n      }\n\n      // Handle children and special content\n      for (const child in value) {\n        if (child === '#text') {\n          children += value[child]\n        } else if (child === '#cdata') {\n          children += '<![CDATA[' + value[child] + ']]>'\n        } else if (child.charAt(0) !== '@') {\n          hasChild = true\n          children += toXml(value[child], child, currentIndent + indent)\n        }\n      }\n\n      if (hasChild) {\n        xml += currentIndent + '<' + key + attributes + '>\\n'\n        xml += children\n        xml += currentIndent + '</' + key + '>\\n'\n      } else {\n        xml += currentIndent + '<' + key + attributes + '/>\\n'\n      }\n    } else {\n      xml += currentIndent + '<' + key + '>' + (value?.toString() || '') + '</' + key + '>\\n'\n    }\n\n    return xml\n  }\n\n  let xml = ''\n\n  // Add XML declaration if requested\n  if (xmlDeclaration) {\n    xml += '<?xml version=\"1.0\" encoding=\"UTF-8\"?>'\n    if (format) {\n      xml += '\\n'\n    }\n  }\n\n  // Convert data to XML\n  for (const key in data) {\n    if (Object.hasOwn(data, key)) {\n      xml += toXml(data[key], key, '')\n    }\n  }\n\n  // Format or compact the output\n  if (format) {\n    return xml.trim()\n  }\n\n  // Remove all newlines and extra spaces, but keep the XML declaration clean\n  return xml.replace(/\\n/g, '').replace(/>\\s+</g, '><').trim()\n}\n"],
-  "mappings": "AAGO,SAAS,SACd,MACA,UAII,CAAC,GACL;AACA,QAAM,EAAE,SAAS,MAAM,SAAS,MAAM,iBAAiB,KAAK,IAAI;AAEhE,QAAM,QAAQ,CAAC,OAAY,KAAa,kBAAkC;AACxE,QAAIA,OAAM;AAEV,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,IAAI,GAAG,KAAK;AAC5C,QAAAA,QAAO,MAAM,MAAM,CAAC,GAAG,KAAK,aAAa;AAAA,MAC3C;AAAA,IACF,WAAW,OAAO,UAAU,YAAY,UAAU,MAAM;AACtD,UAAI,WAAW;AACf,UAAI,aAAa;AACjB,UAAI,WAAW;AAGf,iBAAW,QAAQ,OAAO;AACxB,YAAI,KAAK,OAAO,CAAC,MAAM,KAAK;AAC1B,wBAAc,MAAM,KAAK,OAAO,CAAC,IAAI,OAAO,MAAM,IAAI,EAAE,SAAS,IAAI;AAAA,QACvE;AAAA,MACF;AAGA,iBAAW,SAAS,OAAO;AACzB,YAAI,UAAU,SAAS;AACrB,sBAAY,MAAM,KAAK;AAAA,QACzB,WAAW,UAAU,UAAU;AAC7B,sBAAY,cAAc,MAAM,KAAK,IAAI;AAAA,QAC3C,WAAW,MAAM,OAAO,CAAC,MAAM,KAAK;AAClC,qBAAW;AACX,sBAAY,MAAM,MAAM,KAAK,GAAG,OAAO,gBAAgB,MAAM;AAAA,QAC/D;AAAA,MACF;AAEA,UAAI,UAAU;AACZ,QAAAA,QAAO,gBAAgB,MAAM,MAAM,aAAa;AAChD,QAAAA,QAAO;AACP,QAAAA,QAAO,gBAAgB,OAAO,MAAM;AAAA,MACtC,OAAO;AACL,QAAAA,QAAO,gBAAgB,MAAM,MAAM,aAAa;AAAA,MAClD;AAAA,IACF,OAAO;AACL,MAAAA,QAAO,gBAAgB,MAAM,MAAM,OAAO,OAAO,SAAS,KAAK,MAAM,OAAO,MAAM;AAAA,IACpF;AAEA,WAAOA;AAAA,EACT;AAEA,MAAI,MAAM;AAGV,MAAI,gBAAgB;AAClB,WAAO;AACP,QAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,EACF;AAGA,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,OAAO,MAAM,GAAG,GAAG;AAC5B,aAAO,MAAM,KAAK,GAAG,GAAG,KAAK,EAAE;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,QAAQ;AACV,WAAO,IAAI,KAAK;AAAA,EAClB;AAGA,SAAO,IAAI,QAAQ,OAAO,EAAE,EAAE,QAAQ,UAAU,IAAI,EAAE,KAAK;AAC7D;",
+  "sourcesContent": ["/**\n * Character map for XML escaping to prevent XML injection attacks.\n */\nconst XML_ESCAPE_MAP: Record<string, string> = {\n  '&': '&amp;',\n  '<': '&lt;',\n  '>': '&gt;',\n  '\"': '&quot;',\n  \"'\": '&apos;',\n}\n\n/**\n * Escapes special XML characters to prevent injection attacks.\n */\nfunction escapeXml(str: string): string {\n  return str.replace(/[&<>\"']/g, (char) => XML_ESCAPE_MAP[char] ?? char)\n}\n\n/**\n * This function converts an object to XML.\n * Values are automatically escaped to prevent XML injection attacks.\n */\nexport function json2xml(\n  data: Record<string, any>,\n  options: {\n    indent?: string\n    format?: boolean\n    xmlDeclaration?: boolean\n  } = {},\n) {\n  const { indent = '  ', format = true, xmlDeclaration = true } = options\n\n  const toXml = (value: any, key: string, currentIndent: string): string => {\n    let xml = ''\n\n    if (Array.isArray(value)) {\n      for (let i = 0, n = value.length; i < n; i++) {\n        xml += toXml(value[i], key, currentIndent)\n      }\n    } else if (typeof value === 'object' && value !== null) {\n      let hasChild = false\n      let attributes = ''\n      let children = ''\n\n      // Handle attributes (keys starting with @)\n      for (const attr in value) {\n        if (attr.charAt(0) === '@') {\n          attributes += ' ' + attr.substr(1) + '=\"' + escapeXml(value[attr].toString()) + '\"'\n        }\n      }\n\n      // Handle children and special content\n      for (const child in value) {\n        if (child === '#text') {\n          children += escapeXml(value[child]?.toString() ?? '')\n        } else if (child === '#cdata') {\n          // Escape ]]> sequences to prevent CDATA injection\n          const cdataContent = value[child]?.toString() ?? ''\n          children += '<![CDATA[' + cdataContent.replace(/]]>/g, ']]]]><![CDATA[>') + ']]>'\n        } else if (child.charAt(0) !== '@') {\n          hasChild = true\n          children += toXml(value[child], child, currentIndent + indent)\n        }\n      }\n\n      if (hasChild || children) {\n        xml += currentIndent + '<' + key + attributes + '>\\n'\n        xml += children\n        xml += currentIndent + '</' + key + '>\\n'\n      } else {\n        xml += currentIndent + '<' + key + attributes + '/>\\n'\n      }\n    } else {\n      xml += currentIndent + '<' + key + '>' + escapeXml(value?.toString() || '') + '</' + key + '>\\n'\n    }\n\n    return xml\n  }\n\n  let xml = ''\n\n  // Add XML declaration if requested\n  if (xmlDeclaration) {\n    xml += '<?xml version=\"1.0\" encoding=\"UTF-8\"?>'\n    if (format) {\n      xml += '\\n'\n    }\n  }\n\n  // Convert data to XML\n  for (const key in data) {\n    if (Object.hasOwn(data, key)) {\n      xml += toXml(data[key], key, '')\n    }\n  }\n\n  // Format or compact the output\n  if (format) {\n    return xml.trim()\n  }\n\n  // Remove all newlines and extra spaces, but keep the XML declaration clean\n  return xml.replace(/\\n/g, '').replace(/>\\s+</g, '><').trim()\n}\n"],
+  "mappings": "AAGA,MAAM,iBAAyC;AAAA,EAC7C,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACP;AAKA,SAAS,UAAU,KAAqB;AACtC,SAAO,IAAI,QAAQ,YAAY,CAAC,SAAS,eAAe,IAAI,KAAK,IAAI;AACvE;AAMO,SAAS,SACd,MACA,UAII,CAAC,GACL;AACA,QAAM,EAAE,SAAS,MAAM,SAAS,MAAM,iBAAiB,KAAK,IAAI;AAEhE,QAAM,QAAQ,CAAC,OAAY,KAAa,kBAAkC;AACxE,QAAIA,OAAM;AAEV,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,eAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,IAAI,GAAG,KAAK;AAC5C,QAAAA,QAAO,MAAM,MAAM,CAAC,GAAG,KAAK,aAAa;AAAA,MAC3C;AAAA,IACF,WAAW,OAAO,UAAU,YAAY,UAAU,MAAM;AACtD,UAAI,WAAW;AACf,UAAI,aAAa;AACjB,UAAI,WAAW;AAGf,iBAAW,QAAQ,OAAO;AACxB,YAAI,KAAK,OAAO,CAAC,MAAM,KAAK;AAC1B,wBAAc,MAAM,KAAK,OAAO,CAAC,IAAI,OAAO,UAAU,MAAM,IAAI,EAAE,SAAS,CAAC,IAAI;AAAA,QAClF;AAAA,MACF;AAGA,iBAAW,SAAS,OAAO;AACzB,YAAI,UAAU,SAAS;AACrB,sBAAY,UAAU,MAAM,KAAK,GAAG,SAAS,KAAK,EAAE;AAAA,QACtD,WAAW,UAAU,UAAU;AAE7B,gBAAM,eAAe,MAAM,KAAK,GAAG,SAAS,KAAK;AACjD,sBAAY,cAAc,aAAa,QAAQ,QAAQ,iBAAiB,IAAI;AAAA,QAC9E,WAAW,MAAM,OAAO,CAAC,MAAM,KAAK;AAClC,qBAAW;AACX,sBAAY,MAAM,MAAM,KAAK,GAAG,OAAO,gBAAgB,MAAM;AAAA,QAC/D;AAAA,MACF;AAEA,UAAI,YAAY,UAAU;AACxB,QAAAA,QAAO,gBAAgB,MAAM,MAAM,aAAa;AAChD,QAAAA,QAAO;AACP,QAAAA,QAAO,gBAAgB,OAAO,MAAM;AAAA,MACtC,OAAO;AACL,QAAAA,QAAO,gBAAgB,MAAM,MAAM,aAAa;AAAA,MAClD;AAAA,IACF,OAAO;AACL,MAAAA,QAAO,gBAAgB,MAAM,MAAM,MAAM,UAAU,OAAO,SAAS,KAAK,EAAE,IAAI,OAAO,MAAM;AAAA,IAC7F;AAEA,WAAOA;AAAA,EACT;AAEA,MAAI,MAAM;AAGV,MAAI,gBAAgB;AAClB,WAAO;AACP,QAAI,QAAQ;AACV,aAAO;AAAA,IACT;AAAA,EACF;AAGA,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,OAAO,MAAM,GAAG,GAAG;AAC5B,aAAO,MAAM,KAAK,GAAG,GAAG,KAAK,EAAE;AAAA,IACjC;AAAA,EACF;AAGA,MAAI,QAAQ;AACV,WAAO,IAAI,KAAK;AAAA,EAClB;AAGA,SAAO,IAAI,QAAQ,OAAO,EAAE,EAAE,QAAQ,UAAU,IAAI,EAAE,KAAK;AAC7D;",
   "names": ["xml"]
 }

package/dist/object/is-object.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Returns true if the provided value is a plain object
+ * (i.e. not null, not an array, and typeof value is "object").
+ *
+ * This is a type guard useful for narrowing types in TypeScript.
+ *
+ * Examples:
+ *   isObject({})                // true
+ *   isObject({ a: 1 })          // true
+ *   isObject([])                // false (Array)
+ *   isObject(null)              // false
+ *   isObject(123)               // false
+ *   isObject('string')          // false
+ *   isObject(new Date())        // true  (note: Date is technically an object)
+ *   isObject(Object.create(null)) // true
+ */
+export declare const isObject: (value: unknown) => value is Record<string, unknown>;
+//# sourceMappingURL=is-object.d.ts.map

package/dist/object/is-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-object.d.ts","sourceRoot":"","sources":["../../src/object/is-object.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAExE,CAAA"}

package/dist/object/is-object.js

@@ -0,0 +1,7 @@
+const isObject = (value) => {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+};
+export {
+  isObject
+};
+//# sourceMappingURL=is-object.js.map

package/dist/object/is-object.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/object/is-object.ts"],
+  "sourcesContent": ["/**\n * Returns true if the provided value is a plain object\n * (i.e. not null, not an array, and typeof value is \"object\").\n *\n * This is a type guard useful for narrowing types in TypeScript.\n *\n * Examples:\n *   isObject({})                // true\n *   isObject({ a: 1 })          // true\n *   isObject([])                // false (Array)\n *   isObject(null)              // false\n *   isObject(123)               // false\n *   isObject('string')          // false\n *   isObject(new Date())        // true  (note: Date is technically an object)\n *   isObject(Object.create(null)) // true\n */\nexport const isObject = (value: unknown): value is Record<string, unknown> => {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n"],
+  "mappings": "AAgBO,MAAM,WAAW,CAAC,UAAqD;AAC5E,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;",
+  "names": []
+}

package/dist/testing/console-spies.d.ts

@@ -1,11 +1,11 @@
 /** Spy on console.warn */
-export declare const consoleWarnSpy: import("vitest").MockInstance<{
+export declare const consoleWarnSpy: import("vitest").Mock<{
     (...data: any[]): void;
     (message?: any, ...optionalParams: any[]): void;
 }>;
 export declare let isConsoleWarnEnabled: boolean;
 /** Spy on console.error */
-export declare const consoleErrorSpy: import("vitest").MockInstance<{
+export declare const consoleErrorSpy: import("vitest").Mock<{
     (...data: any[]): void;
     (message?: any, ...optionalParams: any[]): void;
 }>;

package/package.json

@@ -14,7 +14,7 @@
     "helpers",
     "js"
   ],
-  "version": "0.2.6",
+  "version": "0.2.8",
   "engines": {
     "node": ">=20"
   },
@@ -89,8 +89,8 @@
   ],
   "devDependencies": {
     "jsdom": "26.1.0",
-    "vite": "7.1.11",
-    "vitest": "3.2.4",
+    "vite": "^7.3.1",
+    "vitest": "4.0.16",
     "@scalar/build-tooling": "0.4.1"
   },
   "scripts": {