ghtml 2.0.1 → 2.0.3

package/.eslintrc.json

@@ -2,6 +2,7 @@
   "root": true,
   "extends": ["plugin:grules/all"],
   "rules": {
-    "no-await-in-loop": "off"
+    "no-await-in-loop": "off",
+    "require-unicode-regexp": "off"
   }
 }

package/README.md

@@ -8,7 +8,7 @@ Inspired by [html-template-tag](https://github.com/AntonioVdlC/html-template-tag
 npm i ghtml
 ```
 
-## API Reference
+## API
 
 ### `html`
 
@@ -26,13 +26,13 @@ Keep in mind that, in Node.js, all else being equal, streaming a response using
 
 This version of HTML generator should be preferred for asynchronous and streaming use cases. The output is generated as the promise expressions resolve or stream expressions send data.
 
-**Minor Note:**
+**Note:**
 
 Because they return generators instead of strings, a key difference of `htmlGenerator` and `htmlAsyncGenerator` is their ability to recognize and properly handle iterable elements within array expressions. This is to detect nested `htmlGenerator` and `htmlAsyncGenerator` usage, enabling scenarios such as ``${[1, 2, 3].map(i => htmlGenerator`<li>${i}</li>`)}``.
 
 ### `includeFile`
 
-Available in Node.js, the `includeFile` function is a wrapper around `readFileSync`. It reads and outputs the content of a file while also caching it in memory for faster future reuse.
+Available in Node.js, the `includeFile` function is a wrapper around `readFileSync`. It reads and returns the content of a file while also caching it in memory for faster future reuse.
 
 ## Usage
 
@@ -171,4 +171,4 @@ console.log(logo);
 
 ## Security
 
-Like [similar](https://handlebarsjs.com/guide/#html-escaping) [tools](https://github.com/mde/ejs/blob/main/SECURITY.md#out-of-scope-vulnerabilities), `ghtml` does not prevent all kinds of XSS attacks. It is the responsibility of consumers to sanitize user inputs. Some inherently insecure uses include dynamically generating JavaScript, failing to quote HTML attribute values (especially when they contain expressions), and using unsanitized user-provided URLs.
+Like [similar](https://github.com/mde/ejs/blob/main/SECURITY.md#out-of-scope-vulnerabilities) [tools](https://handlebarsjs.com/guide/#html-escaping), ghtml does not prevent all kinds of XSS attacks. It is the responsibility of developers to sanitize user inputs. Some inherently insecure uses include dynamically generating JavaScript, failing to quote HTML attribute values (especially when they contain expressions), and relying on unsanitized user-provided URLs.

package/SECURITY.md

@@ -0,0 +1,12 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| ^1      | :x:                |
+| ^2      | :white_check_mark: |
+
+## Reporting a Vulnerability
+
+Please report all vulnerabilities to [https://github.com/gurgunday/ghtml/security](https://github.com/gurgunday/ghtml/security).

package/package.json

@@ -3,7 +3,7 @@
   "description": "Replace your template engine with fast JavaScript by leveraging the power of tagged templates.",
   "author": "Gürgün Dayıoğlu",
   "license": "MIT",
-  "version": "2.0.1",
+  "version": "2.0.3",
   "type": "module",
   "main": "./src/index.js",
   "exports": {

package/src/html.js

@@ -1,3 +1,9 @@
+const arrayIsArray = Array.isArray;
+
+const symbolIterator = Symbol.iterator;
+
+const symbolAsyncIterator = Symbol.asyncIterator;
+
 const escapeDictionary = {
   '"': """,
   "&": "&",
@@ -7,10 +13,7 @@ const escapeDictionary = {
   "`": "`",
 };
 
-const escapeRegExp = new RegExp(
-  `[${Object.keys(escapeDictionary).join("")}]`,
-  "u",
-);
+const escapeRegExp = new RegExp(`[${Object.keys(escapeDictionary).join("")}]`);
 
 const escapeFunction = (string) => {
   const stringLength = string.length;
@@ -30,8 +33,6 @@ const escapeFunction = (string) => {
   return escaped + string.slice(start, end);
 };
 
-const arrayIsArray = Array.isArray;
-
 /**
  * @param {{ raw: string[] }} literals Tagged template literals.
  * @param {...any} expressions Expressions to interpolate.
@@ -48,7 +49,7 @@ const html = ({ raw: literals }, ...expressions) => {
     let string =
       typeof expression === "string"
         ? expression
-        : expression === undefined || expression === null
+        : expression == null
           ? ""
           : arrayIsArray(expression)
             ? expression.join("")
@@ -82,10 +83,10 @@ const htmlGenerator = function* ({ raw: literals }, ...expressions) {
 
     if (typeof expression === "string") {
       string = expression;
-    } else if (expression === undefined || expression === null) {
+    } else if (expression == null) {
       string = "";
     } else {
-      if (expression[Symbol.iterator]) {
+      if (expression[symbolIterator]) {
         const isRaw =
           literal !== "" && literal.charCodeAt(literal.length - 1) === 33;
 
@@ -101,16 +102,16 @@ const htmlGenerator = function* ({ raw: literals }, ...expressions) {
           if (typeof expression === "string") {
             string = expression;
           } else {
-            if (expression === undefined || expression === null) {
+            if (expression == null) {
               continue;
             }
 
-            if (expression[Symbol.iterator]) {
+            if (expression[symbolIterator]) {
               for (expression of expression) {
                 if (typeof expression === "string") {
                   string = expression;
                 } else {
-                  if (expression === undefined || expression === null) {
+                  if (expression == null) {
                     continue;
                   }
 
@@ -179,10 +180,10 @@ const htmlAsyncGenerator = async function* ({ raw: literals }, ...expressions) {
 
     if (typeof expression === "string") {
       string = expression;
-    } else if (expression === undefined || expression === null) {
+    } else if (expression == null) {
       string = "";
     } else {
-      if (expression[Symbol.iterator] || expression[Symbol.asyncIterator]) {
+      if (expression[symbolIterator] || expression[symbolAsyncIterator]) {
         const isRaw =
           literal !== "" && literal.charCodeAt(literal.length - 1) === 33;
 
@@ -198,19 +199,16 @@ const htmlAsyncGenerator = async function* ({ raw: literals }, ...expressions) {
           if (typeof expression === "string") {
             string = expression;
           } else {
-            if (expression === undefined || expression === null) {
+            if (expression == null) {
               continue;
             }
 
-            if (
-              expression[Symbol.iterator] ||
-              expression[Symbol.asyncIterator]
-            ) {
+            if (expression[symbolIterator] || expression[symbolAsyncIterator]) {
               for await (expression of expression) {
                 if (typeof expression === "string") {
                   string = expression;
                 } else {
-                  if (expression === undefined || expression === null) {
+                  if (expression == null) {
                     continue;
                   }