fast-xml-parser 4.2.3 → 4.2.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.
 
+**4.2.5 / 2023-06-22**
+* change code implementation
+
+**4.2.4 / 2023-06-06**
+* fix security bug
+
 **4.2.3 / 2023-06-05**
 * fix security bug
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fast-xml-parser",
-  "version": "4.2.3",
+  "version": "4.2.5",
   "description": "Validate XML, Parse XML, Build XML without C/C++ based libraries",
   "main": "./src/fxp.js",
   "scripts": {

package/src/xmlparser/DocTypeReader.js

@@ -1,3 +1,5 @@
+const util = require('../util');
+
 //TODO: handle comments
 function readDocType(xmlData, i){
     
@@ -140,16 +142,11 @@ function isNotation(xmlData, i){
     return false
 }
 
-//an entity name should not contains special characters that may be used in regex
-//Eg !?\\\/[]$%{}^&*()<>
-const specialChar = "!?\\\/[]$%{}^&*()<>";
-
 function validateEntityName(name){
-    for (let i = 0; i < specialChar.length; i++) {
-        const ch = specialChar[i];
-        if(name.indexOf(ch) !== -1) throw new Error(`Invalid character ${ch} in entity name`);
-    }
-    return name;
+    if (util.isName(name))
+	return name;
+    else
+        throw new Error(`Invalid entity name ${name}`);
 }
 
-module.exports = readDocType;
+module.exports = readDocType;