@xmldom/xmldom 0.9.0-beta.3 → 0.9.0-beta.4

package/CHANGELOG.md

@@ -4,6 +4,24 @@ All notable changes to this project will be documented in this file.
 
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.9.0-beta.4](https://github.com/xmldom/xmldom/compare/0.9.0-beta.3...0.9.0-beta.4)
+
+### Fixed
+
+- Security: Prevent inserting DOM nodes when they are not well-formed [`CVE-2022-39353`](https://github.com/xmldom/xmldom/security/advisories/GHSA-crh6-fp67-6883)
+  In case such a DOM would be created, the part that is not well-formed will be transformed into text nodes, in which xml specific characters like `<` and `>` are encoded accordingly.
+  In the upcoming version 0.9.0 those text nodes will no longer be added and an error will be thrown instead.
+  This change can break your code, if you relied on this behavior, e.g. multiple root elements in the past. We consider it more important to align with the specs that we want to be aligned with, considering the potential security issues that might derive from people not being aware of the difference in behavior.
+  Related Spec: <https://dom.spec.whatwg.org/#concept-node-ensure-pre-insertion-validity>
+
+### Chore
+
+- update multiple devDependencies
+- Add eslint-plugin-node for `lib` [`#448`](https://github.com/xmldom/xmldom/pull/448) / [`#190`](https://github.com/xmldom/xmldom/issues/190)
+- style: Apply prettier to all code [`#447`](https://github.com/xmldom/xmldom/pull/447) / [`#29`](https://github.com/xmldom/xmldom/issues/29) / [`#130`](https://github.com/xmldom/xmldom/issues/130)
+
+Thank you, [@XhmikosR](https://github.com/XhmikosR), [@awwright](https://github.com/awwright), [@frumioj](https://github.com/frumioj), [@cjbarth](https://github.com/cjbarth), [@markgollnick](https://github.com/markgollnick) for your contributions
+
 ## [0.9.0-beta.3](https://github.com/xmldom/xmldom/compare/0.9.0-beta.2...0.9.0-beta.3)
 
 ### Fixed

package/lib/.eslintrc.yml

@@ -1,2 +1,3 @@
 extends:
   - 'plugin:es5/no-es2015'
+  - 'plugin:node/recommended'

package/lib/conventions.js

@@ -1,4 +1,4 @@
-'use strict'
+'use strict';
 
 /**
  * "Shallow freezes" an object to render it immutable.
@@ -17,9 +17,9 @@
  */
 function freeze(object, oc) {
 	if (oc === undefined) {
-		oc = Object
+		oc = Object;
 	}
-	return oc && typeof oc.freeze === 'function' ? oc.freeze(object) : object
+	return oc && typeof oc.freeze === 'function' ? oc.freeze(object) : object;
 }
 
 /**
@@ -37,14 +37,14 @@ function freeze(object, oc) {
  */
 function assign(target, source) {
 	if (target === null || typeof target !== 'object') {
-		throw new TypeError('target is not an object')
+		throw new TypeError('target is not an object');
 	}
 	for (var key in source) {
 		if (Object.prototype.hasOwnProperty.call(source, key)) {
-			target[key] = source[key]
+			target[key] = source[key];
 		}
 	}
-	return target
+	return target;
 }
 
 /**
@@ -87,7 +87,7 @@ var HTML_BOOLEAN_ATTRIBUTES = freeze({
 	required: true,
 	reversed: true,
 	selected: true,
-})
+});
 
 /**
  * Check if `name` is matching one of the HTML boolean attribute names.
@@ -100,7 +100,7 @@ var HTML_BOOLEAN_ATTRIBUTES = freeze({
  * @see https://html.spec.whatwg.org/#attributes-3
  */
 function isHTMLBooleanAttribute(name) {
-	return HTML_BOOLEAN_ATTRIBUTES.hasOwnProperty(name.toLowerCase())
+	return HTML_BOOLEAN_ATTRIBUTES.hasOwnProperty(name.toLowerCase());
 }
 
 /**
@@ -131,7 +131,7 @@ var HTML_VOID_ELEMENTS = freeze({
 	source: true,
 	track: true,
 	wbr: true,
-})
+});
 
 /**
  * Check if `tagName` is matching one of the HTML void element names.
@@ -144,7 +144,7 @@ var HTML_VOID_ELEMENTS = freeze({
  * @see https://html.spec.whatwg.org/#void-elements
  */
 function isHTMLVoidElement(tagName) {
-	return HTML_VOID_ELEMENTS.hasOwnProperty(tagName.toLowerCase())
+	return HTML_VOID_ELEMENTS.hasOwnProperty(tagName.toLowerCase());
 }
 
 /**
@@ -161,7 +161,7 @@ var HTML_RAW_TEXT_ELEMENTS = freeze({
 	style: false,
 	textarea: true,
 	title: true,
-})
+});
 
 /**
  * Check if `tagName` is matching one of the HTML raw text element names.
@@ -227,7 +227,7 @@ var MIME_TYPE = freeze({
 	 * @see [`DOMParser.parseFromString` @ HTML Specification](https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#dom-domparser-parsefromstring)
 	 */
 	isHTML: function (value) {
-		return value === MIME_TYPE.HTML
+		return value === MIME_TYPE.HTML;
 	},
 
 	/**
@@ -242,9 +242,7 @@ var MIME_TYPE = freeze({
 	 * @see https://dom.spec.whatwg.org/#dom-domimplementation-createhtmldocument
 	 */
 	hasDefaultHTMLNamespace: function (mimeType) {
-		return (
-			MIME_TYPE.isHTML(mimeType) || mimeType === MIME_TYPE.XML_XHTML_APPLICATION
-		)
+		return MIME_TYPE.isHTML(mimeType) || mimeType === MIME_TYPE.XML_XHTML_APPLICATION;
 	},
 
 	/**
@@ -283,7 +281,7 @@ var MIME_TYPE = freeze({
 	 * @see https://en.wikipedia.org/wiki/Scalable_Vector_Graphics Wikipedia
 	 */
 	XML_SVG_IMAGE: 'image/svg+xml',
-})
+});
 
 /**
  * Namespaces that are used in this code base.
@@ -306,7 +304,7 @@ var NAMESPACE = freeze({
 	 * @see NAMESPACE.HTML
 	 */
 	isHTML: function (uri) {
-		return uri === NAMESPACE.HTML
+		return uri === NAMESPACE.HTML;
 	},
 
 	/**
@@ -329,16 +327,16 @@ var NAMESPACE = freeze({
 	 * @see https://www.w3.org/2000/xmlns/
 	 */
 	XMLNS: 'http://www.w3.org/2000/xmlns/',
-})
+});
 
-exports.assign = assign
-exports.freeze = freeze
-exports.HTML_BOOLEAN_ATTRIBUTES = HTML_BOOLEAN_ATTRIBUTES
-exports.HTML_RAW_TEXT_ELEMENTS = HTML_RAW_TEXT_ELEMENTS
-exports.HTML_VOID_ELEMENTS = HTML_VOID_ELEMENTS
-exports.isHTMLBooleanAttribute = isHTMLBooleanAttribute
-exports.isHTMLRawTextElement = isHTMLRawTextElement
-exports.isHTMLEscapableRawTextElement = isHTMLEscapableRawTextElement
-exports.isHTMLVoidElement = isHTMLVoidElement
-exports.MIME_TYPE = MIME_TYPE
-exports.NAMESPACE = NAMESPACE
+exports.assign = assign;
+exports.freeze = freeze;
+exports.HTML_BOOLEAN_ATTRIBUTES = HTML_BOOLEAN_ATTRIBUTES;
+exports.HTML_RAW_TEXT_ELEMENTS = HTML_RAW_TEXT_ELEMENTS;
+exports.HTML_VOID_ELEMENTS = HTML_VOID_ELEMENTS;
+exports.isHTMLBooleanAttribute = isHTMLBooleanAttribute;
+exports.isHTMLRawTextElement = isHTMLRawTextElement;
+exports.isHTMLEscapableRawTextElement = isHTMLEscapableRawTextElement;
+exports.isHTMLVoidElement = isHTMLVoidElement;
+exports.MIME_TYPE = MIME_TYPE;
+exports.NAMESPACE = NAMESPACE;

package/lib/dom-parser.js

@@ -1,7 +1,7 @@
-'use strict'
+'use strict';
 
-var conventions = require("./conventions");
-var dom = require('./dom')
+var conventions = require('./conventions');
+var dom = require('./dom');
 var entities = require('./entities');
 var sax = require('./sax');
 
@@ -35,9 +35,7 @@ var XMLReader = sax.XMLReader;
  * @returns {string}
  */
 function normalizeLineEndings(input) {
-	return input
-		.replace(/\r[\n\u0085]/g, '\n')
-		.replace(/[\r\u0085\u2028]/g, '\n')
+	return input.replace(/\r[\n\u0085]/g, '\n').replace(/[\r\u0085\u2028]/g, '\n');
 }
 
 /**
@@ -85,9 +83,8 @@ function normalizeLineEndings(input) {
  * @see https://developer.mozilla.org/en-US/docs/Web/API/DOMParser
  * @see https://html.spec.whatwg.org/multipage/dynamic-markup-insertion.html#dom-parsing-and-serialization
  */
-function DOMParser(options){
-
-	options = options || {locator:true};
+function DOMParser(options) {
+	options = options || { locator: true };
 
 	/**
 	 * The method to use instead of `Object.assign` (or if not available `conventions.assign`),
@@ -98,7 +95,7 @@ function DOMParser(options){
 	 * @private
 	 * @see conventions.assign
 	 */
-	this.assign = options.assign || Object.assign || conventions.assign
+	this.assign = options.assign || Object.assign || conventions.assign;
 
 	/**
 	 * For internal testing: The class for creating an instance for handling events from the SAX parser.
@@ -108,7 +105,7 @@ function DOMParser(options){
 	 * @readonly
 	 * @private
 	 */
-	this.domHandler = options.domHandler || DOMHandler
+	this.domHandler = options.domHandler || DOMHandler;
 
 	/**
 	 * A function that can be invoked as the errorHandler instead of the default ones.
@@ -123,7 +120,7 @@ function DOMParser(options){
 	 * @type {(string) => string}
 	 * @readonly
 	 */
-	this.normalizeLineEndings = options.normalizeLineEndings || normalizeLineEndings
+	this.normalizeLineEndings = options.normalizeLineEndings || normalizeLineEndings;
 
 	/**
 	 * Configures if the nodes created during parsing
@@ -133,7 +130,7 @@ function DOMParser(options){
 	 * @type {boolean}
 	 * @readonly
 	 */
-	this.locator = !!options.locator
+	this.locator = !!options.locator;
 
 	/**
 	 * The default namespace can be provided by the key that is the empty string.
@@ -143,7 +140,7 @@ function DOMParser(options){
 	 * @type {Readonly<object>}
 	 * @readonly
 	 */
-	this.xmlns = options.xmlns || {}
+	this.xmlns = options.xmlns || {};
 }
 
 /**
@@ -175,55 +172,63 @@ function DOMParser(options){
  * @see https://html.spec.whatwg.org/#dom-domparser-parsefromstring-dev
  */
 DOMParser.prototype.parseFromString = function (source, mimeType) {
-	var defaultNSMap = this.assign({}, this.xmlns)
-	var entityMap = entities.XML_ENTITIES
-	var defaultNamespace = defaultNSMap[''] || null
+	var defaultNSMap = this.assign({}, this.xmlns);
+	var entityMap = entities.XML_ENTITIES;
+	var defaultNamespace = defaultNSMap[''] || null;
 	if (MIME_TYPE.hasDefaultHTMLNamespace(mimeType)) {
-		entityMap = entities.HTML_ENTITIES
-		defaultNamespace = NAMESPACE.HTML
+		entityMap = entities.HTML_ENTITIES;
+		defaultNamespace = NAMESPACE.HTML;
 	} else if (mimeType === MIME_TYPE.XML_SVG_IMAGE) {
-		defaultNamespace = NAMESPACE.SVG
+		defaultNamespace = NAMESPACE.SVG;
 	}
-	defaultNSMap[''] = defaultNamespace
-	defaultNSMap.xml = defaultNSMap.xml || NAMESPACE.XML
+	defaultNSMap[''] = defaultNamespace;
+	defaultNSMap.xml = defaultNSMap.xml || NAMESPACE.XML;
 
 	var domBuilder = new this.domHandler({
 		mimeType: mimeType,
 		defaultNamespace: defaultNamespace,
-	})
+	});
 	var locator = this.locator ? {} : undefined;
 	if (this.locator) {
-		domBuilder.setDocumentLocator(locator)
+		domBuilder.setDocumentLocator(locator);
 	}
 
-	var sax = new XMLReader()
-	sax.errorHandler = buildErrorHandler(this.errorHandler, domBuilder, locator)
-	sax.domBuilder = domBuilder
+	var sax = new XMLReader();
+	sax.errorHandler = buildErrorHandler(this.errorHandler, domBuilder, locator);
+	sax.domBuilder = domBuilder;
 	if (source && typeof source === 'string') {
-		sax.parse(this.normalizeLineEndings(source), defaultNSMap, entityMap)
+		sax.parse(this.normalizeLineEndings(source), defaultNSMap, entityMap);
 	} else {
-		sax.errorHandler.error('invalid doc source')
+		sax.errorHandler.error('invalid doc source');
 	}
-	return domBuilder.doc
-}
-function buildErrorHandler(errorImpl,domBuilder,locator){
-	if(!errorImpl){
-		if(domBuilder instanceof DOMHandler){
+	return domBuilder.doc;
+};
+function buildErrorHandler(errorImpl, domBuilder, locator) {
+	if (!errorImpl) {
+		if (domBuilder instanceof DOMHandler) {
 			return domBuilder;
 		}
-		errorImpl = domBuilder ;
+		errorImpl = domBuilder;
 	}
-	var errorHandler = {}
+	var errorHandler = {};
 	var isCallback = errorImpl instanceof Function;
-	locator = locator||{}
-	function build(key){
+	locator = locator || {};
+	function build(key) {
 		var fn = errorImpl[key];
-		if(!fn && isCallback){
-			fn = errorImpl.length == 2?function(msg){errorImpl(key,msg)}:errorImpl;
+		if (!fn && isCallback) {
+			fn =
+				errorImpl.length == 2
+					? function (msg) {
+							errorImpl(key, msg);
+					  }
+					: errorImpl;
 		}
-		errorHandler[key] = fn && function(msg){
-			fn('[xmldom '+key+']\t'+msg+_locator(locator));
-		}||function(){};
+		errorHandler[key] =
+			(fn &&
+				function (msg) {
+					fn('[xmldom ' + key + ']\t' + msg + _locator(locator));
+				}) ||
+			function () {};
 	}
 	build('warning');
 	build('error');
@@ -247,7 +252,7 @@ function buildErrorHandler(errorImpl,domBuilder,locator){
  * @see http://www.saxproject.org/apidoc/org/xml/sax/ext/DefaultHandler2.html
  */
 function DOMHandler(options) {
-	var opt = options || {}
+	var opt = options || {};
 	/**
 	 * The mime type is used to determine if the DOM handler will create an XML or HTML document.
 	 * Only if it is set to `text/html` it will create an HTML document.
@@ -257,7 +262,7 @@ function DOMHandler(options) {
 	 * @readonly
 	 * @see MIME_TYPE
 	 */
-	this.mimeType = opt.mimeType || MIME_TYPE.XML_APPLICATION
+	this.mimeType = opt.mimeType || MIME_TYPE.XML_APPLICATION;
 
 	/**
 	 * The namespace to use to create an XML document.
@@ -273,14 +278,13 @@ function DOMHandler(options) {
 	 * @readonly
 	 * @private
 	 */
-	this.defaultNamespace = opt.defaultNamespace || null
+	this.defaultNamespace = opt.defaultNamespace || null;
 
 	/**
 	 * @private
 	 * @type {boolean}
 	 */
-	this.cdata = false
-
+	this.cdata = false;
 
 	/**
 	 * The last `Element` that was created by `startElement`.
@@ -291,7 +295,7 @@ function DOMHandler(options) {
 	 * @type {Element | Node | undefined}
 	 * @private
 	 */
-	this.currentElement = undefined
+	this.currentElement = undefined;
 
 	/**
 	 * The Document that is created as part of `startDocument`,
@@ -300,7 +304,7 @@ function DOMHandler(options) {
 	 * @type {Document | undefined}
 	 * @readonly
 	 */
-	this.doc = undefined
+	this.doc = undefined;
 
 	/**
 	 * The locator is stored as part of setDocumentLocator.
@@ -313,9 +317,9 @@ function DOMHandler(options) {
 	 * @readonly (the sax parser currently sometimes set's it)
 	 * @private
 	 */
-	this.locator = undefined
+	this.locator = undefined;
 }
-function position(locator,node){
+function position(locator, node) {
 	node.lineNumber = locator.lineNumber;
 	node.columnNumber = locator.columnNumber;
 }
@@ -328,67 +332,59 @@ DOMHandler.prototype = {
 	 *
 	 * @see  http://www.saxproject.org/apidoc/org/xml/sax/ContentHandler.html
 	 */
-	startDocument : function() {
-		var impl = new DOMImplementation()
-		this.doc = MIME_TYPE.isHTML(this.mimeType)
-			? impl.createHTMLDocument(false)
-			: impl.createDocument(this.defaultNamespace, '')
+	startDocument: function () {
+		var impl = new DOMImplementation();
+		this.doc = MIME_TYPE.isHTML(this.mimeType) ? impl.createHTMLDocument(false) : impl.createDocument(this.defaultNamespace, '');
 	},
-	startElement:function(namespaceURI, localName, qName, attrs) {
+	startElement: function (namespaceURI, localName, qName, attrs) {
 		var doc = this.doc;
-	    var el = doc.createElementNS(namespaceURI, qName||localName);
-	    var len = attrs.length;
-	    appendElement(this, el);
-	    this.currentElement = el;
+		var el = doc.createElementNS(namespaceURI, qName || localName);
+		var len = attrs.length;
+		appendElement(this, el);
+		this.currentElement = el;
 
-		this.locator && position(this.locator,el)
-	    for (var i = 0 ; i < len; i++) {
-	        var namespaceURI = attrs.getURI(i);
-	        var value = attrs.getValue(i);
-	        var qName = attrs.getQName(i);
+		this.locator && position(this.locator, el);
+		for (var i = 0; i < len; i++) {
+			var namespaceURI = attrs.getURI(i);
+			var value = attrs.getValue(i);
+			var qName = attrs.getQName(i);
 			var attr = doc.createAttributeNS(namespaceURI, qName);
-			this.locator &&position(attrs.getLocator(i),attr);
+			this.locator && position(attrs.getLocator(i), attr);
 			attr.value = attr.nodeValue = value;
-			el.setAttributeNode(attr)
-	    }
-	},
-	endElement:function(namespaceURI, localName, qName) {
-		var current = this.currentElement
-		var tagName = current.tagName;
-		this.currentElement = current.parentNode;
-	},
-	startPrefixMapping:function(prefix, uri) {
-	},
-	endPrefixMapping:function(prefix) {
+			el.setAttributeNode(attr);
+		}
 	},
-	processingInstruction:function(target, data) {
-	    var ins = this.doc.createProcessingInstruction(target, data);
-	    this.locator && position(this.locator,ins)
-	    appendElement(this, ins);
+	endElement: function (namespaceURI, localName, qName) {
+		this.currentElement = this.currentElement.parentNode;
 	},
-	ignorableWhitespace:function(ch, start, length) {
+	startPrefixMapping: function (prefix, uri) {},
+	endPrefixMapping: function (prefix) {},
+	processingInstruction: function (target, data) {
+		var ins = this.doc.createProcessingInstruction(target, data);
+		this.locator && position(this.locator, ins);
+		appendElement(this, ins);
 	},
-	characters:function(chars, start, length) {
-		chars = _toString.apply(this,arguments)
+	ignorableWhitespace: function (ch, start, length) {},
+	characters: function (chars, start, length) {
+		chars = _toString.apply(this, arguments);
 		//console.log(chars)
-		if(chars){
+		if (chars) {
 			if (this.cdata) {
 				var charNode = this.doc.createCDATASection(chars);
 			} else {
 				var charNode = this.doc.createTextNode(chars);
 			}
-			if(this.currentElement){
+			if (this.currentElement) {
 				this.currentElement.appendChild(charNode);
-			}else if(/^\s*$/.test(chars)){
+			} else if (/^\s*$/.test(chars)) {
 				this.doc.appendChild(charNode);
 				//process xml
 			}
-			this.locator && position(this.locator,charNode)
+			this.locator && position(this.locator, charNode);
 		}
 	},
-	skippedEntity:function(name) {
-	},
-	endDocument:function() {
+	skippedEntity: function (name) {},
+	endDocument: function () {
 		this.doc.normalize();
 	},
 	/**
@@ -397,62 +393,63 @@ DOMHandler.prototype = {
 	 *
 	 * @param {Locator} locator
 	 */
-	setDocumentLocator:function (locator) {
+	setDocumentLocator: function (locator) {
 		if (locator) {
-			locator.lineNumber = 0
+			locator.lineNumber = 0;
 		}
-		this.locator = locator
+		this.locator = locator;
 	},
 	//LexicalHandler
-	comment:function(chars, start, length) {
-		chars = _toString.apply(this,arguments)
-	    var comm = this.doc.createComment(chars);
-	    this.locator && position(this.locator,comm)
-	    appendElement(this, comm);
+	comment: function (chars, start, length) {
+		chars = _toString.apply(this, arguments);
+		var comm = this.doc.createComment(chars);
+		this.locator && position(this.locator, comm);
+		appendElement(this, comm);
 	},
 
-	startCDATA:function() {
-	    //used in characters() methods
-	    this.cdata = true;
+	startCDATA: function () {
+		//used in characters() methods
+		this.cdata = true;
 	},
-	endCDATA:function() {
-	    this.cdata = false;
+	endCDATA: function () {
+		this.cdata = false;
 	},
 
-	startDTD:function(name, publicId, systemId) {
+	startDTD: function (name, publicId, systemId) {
 		var impl = this.doc.implementation;
-	    if (impl && impl.createDocumentType) {
-	        var dt = impl.createDocumentType(name, publicId, systemId);
-	        this.locator && position(this.locator,dt)
-	        appendElement(this, dt);
-					this.doc.doctype = dt;
-	    }
+		if (impl && impl.createDocumentType) {
+			var dt = impl.createDocumentType(name, publicId, systemId);
+			this.locator && position(this.locator, dt);
+			appendElement(this, dt);
+			this.doc.doctype = dt;
+		}
 	},
 	/**
 	 * @see org.xml.sax.ErrorHandler
 	 * @link http://www.saxproject.org/apidoc/org/xml/sax/ErrorHandler.html
 	 */
-	warning:function(error) {
-		console.warn('[xmldom warning]\t'+error,_locator(this.locator));
+	warning: function (error) {
+		console.warn('[xmldom warning]\t' + error, _locator(this.locator));
 	},
-	error:function(error) {
-		console.error('[xmldom error]\t'+error,_locator(this.locator));
+	error: function (error) {
+		console.error('[xmldom error]\t' + error, _locator(this.locator));
 	},
-	fatalError:function(error) {
+	fatalError: function (error) {
 		throw new ParseError(error, this.locator);
+	},
+};
+function _locator(l) {
+	if (l) {
+		return '\n@#[line:' + l.lineNumber + ',col:' + l.columnNumber + ']';
 	}
 }
-function _locator(l){
-	if(l){
-		return '\n@#[line:'+l.lineNumber+',col:'+l.columnNumber+']'
-	}
-}
-function _toString(chars,start,length){
-	if(typeof chars == 'string'){
-		return chars.substr(start,length)
-	}else{//java sax connect width xmldom on rhino(what about: "? && !(chars instanceof String)")
-		if(chars.length >= start+length || start){
-			return new java.lang.String(chars,start,length)+'';
+function _toString(chars, start, length) {
+	if (typeof chars == 'string') {
+		return chars.substr(start, length);
+	} else {
+		//java sax connect width xmldom on rhino(what about: "? && !(chars instanceof String)")
+		if (chars.length >= start + length || start) {
+			return new java.lang.String(chars, start, length) + '';
 		}
 		return chars;
 	}
@@ -489,18 +486,23 @@ function _toString(chars,start,length){
  *  #notationDecl(name, publicId, systemId) {};
  *  #unparsedEntityDecl(name, publicId, systemId, notationName) {};
  */
-"endDTD,startEntity,endEntity,attributeDecl,elementDecl,externalEntityDecl,internalEntityDecl,resolveEntity,getExternalSubset,notationDecl,unparsedEntityDecl".replace(/\w+/g,function(key){
-	DOMHandler.prototype[key] = function(){return null}
-})
+'endDTD,startEntity,endEntity,attributeDecl,elementDecl,externalEntityDecl,internalEntityDecl,resolveEntity,getExternalSubset,notationDecl,unparsedEntityDecl'.replace(
+	/\w+/g,
+	function (key) {
+		DOMHandler.prototype[key] = function () {
+			return null;
+		};
+	}
+);
 
 /* Private static helpers treated below as private instance methods, so don't need to add these to the public API; we might use a Relator to also get rid of non-standard public properties */
-function appendElement (hander,node) {
-    if (!hander.currentElement) {
-        hander.doc.appendChild(node);
-    } else {
-        hander.currentElement.appendChild(node);
-    }
-}//appendChild and setAttributeNS are preformance key
+function appendElement(hander, node) {
+	if (!hander.currentElement) {
+		hander.doc.appendChild(node);
+	} else {
+		hander.currentElement.appendChild(node);
+	}
+} //appendChild and setAttributeNS are preformance key
 
 exports.__DOMHandler = DOMHandler;
 exports.normalizeLineEndings = normalizeLineEndings;