ooxml-core 1.19.2 → 1.20.0

package/dist/index.cjs

@@ -2459,6 +2459,12 @@ function parseLiteFragment(xml, container, namespaces) {
     }
     if (lt < 0) break;
     const next = source.charCodeAt(lt + 1);
+    if (next === 33) {
+      const after = skipCommentOrCdata(source, lt, top);
+      if (after < 0) return void 0;
+      pos = after;
+      continue;
+    }
     if (next === 47) {
       const gt = source.indexOf(">", lt);
       if (gt < 0 || stack.length < 2 || source.slice(lt + 2, gt).trimEnd() !== top.tagName)
@@ -2479,6 +2485,25 @@ function parseLiteFragment(xml, container, namespaces) {
   }
   return stack.length === 1 ? root : void 0;
 }
+var DECLARATIONS = /<!DOCTYPE|<!ENTITY/i;
+function skipCommentOrCdata(source, lt, parent) {
+  if (source.startsWith("<!--", lt)) {
+    const end = source.indexOf("-->", lt + 4);
+    if (end < 0) return -1;
+    const body = source.slice(lt + 4, end);
+    if (body.includes("--") || body.endsWith("-") || DECLARATIONS.test(body)) return -1;
+    return end + 3;
+  }
+  if (source.startsWith("<![CDATA[", lt)) {
+    const end = source.indexOf("]]>", lt + 9);
+    if (end < 0) return -1;
+    const text4 = source.slice(lt + 9, end);
+    if (DECLARATIONS.test(text4)) return -1;
+    parent.childNodes.push(text4);
+    return end + 3;
+  }
+  return -1;
+}
 function startTag(source, from, namespaces) {
   const n2 = source.length;
   let i2 = from;

package/dist/index.mjs

@@ -2453,6 +2453,12 @@ function parseLiteFragment(xml, container, namespaces) {
     }
     if (lt < 0) break;
     const next = source.charCodeAt(lt + 1);
+    if (next === 33) {
+      const after = skipCommentOrCdata(source, lt, top);
+      if (after < 0) return void 0;
+      pos = after;
+      continue;
+    }
     if (next === 47) {
       const gt = source.indexOf(">", lt);
       if (gt < 0 || stack.length < 2 || source.slice(lt + 2, gt).trimEnd() !== top.tagName)
@@ -2473,6 +2479,25 @@ function parseLiteFragment(xml, container, namespaces) {
   }
   return stack.length === 1 ? root : void 0;
 }
+var DECLARATIONS = /<!DOCTYPE|<!ENTITY/i;
+function skipCommentOrCdata(source, lt, parent) {
+  if (source.startsWith("<!--", lt)) {
+    const end = source.indexOf("-->", lt + 4);
+    if (end < 0) return -1;
+    const body = source.slice(lt + 4, end);
+    if (body.includes("--") || body.endsWith("-") || DECLARATIONS.test(body)) return -1;
+    return end + 3;
+  }
+  if (source.startsWith("<![CDATA[", lt)) {
+    const end = source.indexOf("]]>", lt + 9);
+    if (end < 0) return -1;
+    const text4 = source.slice(lt + 9, end);
+    if (DECLARATIONS.test(text4)) return -1;
+    parent.childNodes.push(text4);
+    return end + 3;
+  }
+  return -1;
+}
 function startTag(source, from, namespaces) {
   const n2 = source.length;
   let i2 = from;