postcss 8.5.8 → 8.5.10

package/LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright 2013 Andrey Sitnik <andrey@sitnik.ru>
+Copyright 2013 Andrey Sitnik <andrey@sitnik.es>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

package/README.md

@@ -14,16 +14,15 @@ and JetBrains. The [Autoprefixer] and [Stylelint] PostCSS plugins are some o
 ---
 
 <img src="https://cdn.evilmartians.com/badges/logo-no-label.svg" alt="" width="22" height="16" />  Built by
- <b><a href="https://evilmartians.com/devtools?utm_source=postcss&utm_campaign=devtools-button&utm_medium=github">Evil Martians</a></b>, go-to agency for <b>developer tools</b>.
+<b><a href="https://evilmartians.com/devtools?utm_source=postcss&utm_campaign=devtools-button&utm_medium=github">Evil Martians</a></b>, go-to agency for <b>developer tools</b>.
 
 ---
 
-[Abstract Syntax Tree]: https://en.wikipedia.org/wiki/Abstract_syntax_tree
-[Evil Martians]:        https://evilmartians.com/?utm_source=postcss
-[Autoprefixer]:         https://github.com/postcss/autoprefixer
-[Stylelint]:            https://stylelint.io/
-[plugins]:              https://github.com/postcss/postcss#plugins
-
+[Abstract Syntax Tree]: https://en.wikipedia.org/wiki/Abstract_syntax_tree
+[Evil Martians]: https://evilmartians.com/?utm_source=postcss
+[Autoprefixer]: https://github.com/postcss/autoprefixer
+[Stylelint]: https://stylelint.io/
+[plugins]: https://github.com/postcss/postcss#plugins
 
 ## Docs
 Read full docs **[here](https://postcss.org/)**.

package/lib/at-rule.d.ts

@@ -49,7 +49,6 @@ declare namespace AtRule {
     raws?: AtRuleRaws
   }
 
-   
   export { AtRule_ as default }
 }
 

package/lib/comment.d.ts

@@ -26,7 +26,6 @@ declare namespace Comment {
     text: string
   }
 
-   
   export { Comment_ as default }
 }
 

package/lib/container.d.ts

@@ -8,11 +8,7 @@ import Rule from './rule.js'
 declare namespace Container {
   export type ContainerWithChildren<Child extends Node = ChildNode> = {
     nodes: Child[]
-  } & (
-    | AtRule
-    | Root
-    | Rule
-  )
+  } & (AtRule | Root | Rule)
 
   export interface ValueOptions {
     /**
@@ -43,7 +39,6 @@ declare namespace Container {
     | string
     | undefined
 
-   
   export { Container_ as default }
 }
 

package/lib/css-syntax-error.d.ts

@@ -16,7 +16,6 @@ declare namespace CssSyntaxError {
     line: number
   }
 
-   
   export { CssSyntaxError_ as default }
 }
 

package/lib/declaration.d.ts

@@ -39,7 +39,6 @@ declare namespace Declaration {
     value: string
   }
 
-   
   export { Declaration_ as default }
 }
 

package/lib/document.d.ts

@@ -16,7 +16,6 @@ declare namespace Document {
     raws?: Record<string, any>
   }
 
-   
   export { Document_ as default }
 }
 

package/lib/fromJSON.d.ts

@@ -4,6 +4,6 @@ interface FromJSON extends JSONHydrator {
   default: FromJSON
 }
 
-declare const fromJSON: FromJSON
+declare let fromJSON: FromJSON
 
 export = fromJSON

package/lib/input.d.ts

@@ -49,7 +49,6 @@ declare namespace Input {
     url: string
   }
 
-   
   export { Input_ as default }
 }
 

package/lib/input.js

@@ -142,7 +142,15 @@ class Input {
       )
     }
 
-    result.input = { column, endColumn, endLine, endOffset, line, offset, source: this.css }
+    result.input = {
+      column,
+      endColumn,
+      endLine,
+      endOffset,
+      line,
+      offset,
+      source: this.css
+    }
     if (this.file) {
       if (pathToFileURL) {
         result.input.url = pathToFileURL(this.file).toString()

package/lib/lazy-result.d.ts

@@ -6,7 +6,6 @@ import Root from './root.js'
 import Warning from './warning.js'
 
 declare namespace LazyResult {
-   
   export { LazyResult_ as default }
 }
 
@@ -19,9 +18,9 @@ declare namespace LazyResult {
  * const lazy = postcss([autoprefixer]).process(css)
  * ```
  */
-declare class LazyResult_<RootNode = Document | Root>
-  implements PromiseLike<Result<RootNode>>
-{
+declare class LazyResult_<RootNode = Document | Root> implements PromiseLike<
+  Result<RootNode>
+> {
   /**
    * Processes input CSS through synchronous and asynchronous plugins
    * and calls onRejected for each error thrown in any plugin.

package/lib/list.d.ts

@@ -55,6 +55,6 @@ declare namespace list {
   }
 }
 
-declare const list: list.List
+declare let list: list.List
 
 export = list

package/lib/no-work-result.d.ts

@@ -6,7 +6,6 @@ import Root from './root.js'
 import Warning from './warning.js'
 
 declare namespace NoWorkResult {
-   
   export { NoWorkResult_ as default }
 }
 

package/lib/no-work-result.js

@@ -2,7 +2,7 @@
 
 let MapGenerator = require('./map-generator')
 let parse = require('./parse')
-const Result = require('./result')
+let Result = require('./result')
 let stringify = require('./stringify')
 let warnOnce = require('./warn-once')
 

package/lib/node.d.ts

@@ -126,7 +126,6 @@ declare namespace Node {
     word?: string
   }
 
-   
   class Node extends Node_ {}
   export { Node as default }
 }

package/lib/parse.d.ts

@@ -4,6 +4,6 @@ interface Parse extends Parser {
   default: Parse
 }
 
-declare const parse: Parse
+declare let parse: Parse
 
 export = parse

package/lib/postcss.d.mts

@@ -1,7 +1,6 @@
 export {
   // Type-only exports
   AcceptedPlugin,
-
   AnyNode,
   atRule,
   AtRule,
@@ -27,7 +26,6 @@ export {
   fromJSON,
   Helpers,
   Input,
-
   JSONHydrator,
   // This is a class, but it’s not re-exported. That’s why it’s exported as type-only here.
   type LazyResult,
@@ -64,6 +62,5 @@ export {
   TransformCallback,
   Transformer,
   Warning,
-
   WarningOptions
 } from './postcss.js'

package/lib/postcss.d.ts

@@ -450,9 +450,7 @@ declare namespace postcss {
  * @param plugins PostCSS plugins.
  * @return Processor to process multiple CSS.
  */
-declare function postcss(
-  plugins?: readonly postcss.AcceptedPlugin[]
-): Processor
+declare function postcss(plugins?: readonly postcss.AcceptedPlugin[]): Processor
 declare function postcss(...plugins: postcss.AcceptedPlugin[]): Processor
 
 export = postcss

package/lib/previous-map.d.ts

@@ -3,7 +3,6 @@ import { SourceMapConsumer } from 'source-map-js'
 import { ProcessOptions } from './postcss.js'
 
 declare namespace PreviousMap {
-   
   export { PreviousMap_ as default }
 }
 

package/lib/previous-map.js

@@ -51,7 +51,8 @@ class PreviousMap {
       return fromBase64(text.substr(baseUriMatch[0].length))
     }
 
-    let encoding = text.match(/data:application\/json;([^,]+),/)[1]
+    let encoding = text.slice('data:application/json;'.length)
+    encoding = encoding.slice(0, encoding.indexOf(','))
     throw new Error('Unsupported source map encoding ' + encoding)
   }
 

package/lib/processor.d.ts

@@ -12,7 +12,6 @@ import Result from './result.js'
 import Root from './root.js'
 
 declare namespace Processor {
-   
   export { Processor_ as default }
 }
 

package/lib/processor.js

@@ -7,7 +7,7 @@ let Root = require('./root')
 
 class Processor {
   constructor(plugins = []) {
-    this.version = '8.5.8'
+    this.version = '8.5.10'
     this.plugins = this.normalize(plugins)
   }
 

package/lib/result.d.ts

@@ -39,7 +39,6 @@ declare namespace Result {
     plugin?: string
   }
 
-   
   export { Result_ as default }
 }
 

package/lib/root.d.ts

@@ -40,7 +40,6 @@ declare namespace Root {
     raws?: RootRaws
   }
 
-   
   export { Root_ as default }
 }
 

package/lib/rule.d.ts

@@ -44,19 +44,19 @@ declare namespace Rule {
     /** Information used to generate byte-to-byte equal node string as it was in the origin input. */
     raws?: RuleRaws
   } & (
-      | {
-          /** Selector or selectors of the rule. */
-          selector: string
-          selectors?: never
-        }
-      | {
-          selector?: never
-          /** Selectors of the rule represented as an array of strings. */
-          selectors: readonly string[]
-        }
-    ) & ContainerProps
+    | {
+        /** Selector or selectors of the rule. */
+        selector: string
+        selectors?: never
+      }
+    | {
+        selector?: never
+        /** Selectors of the rule represented as an array of strings. */
+        selectors: readonly string[]
+      }
+  ) &
+    ContainerProps
 
-   
   export { Rule_ as default }
 }
 

package/lib/stringifier.d.ts

@@ -11,7 +11,6 @@ import {
 } from './postcss.js'
 
 declare namespace Stringifier {
-   
   export { Stringifier_ as default }
 }
 

package/lib/stringifier.js

@@ -1,5 +1,17 @@
 'use strict'
 
+// Escapes sequences that could break out of an HTML <style> context.
+// Uses CSS unicode escaping (\3c = '<') which is valid CSS and parsed
+// correctly by all compliant CSS consumers.
+const STYLE_TAG = /(<)(\/?style\b)/gi
+const COMMENT_OPEN = /(<)(!--)/g
+
+function escapeHTMLInCSS(str) {
+  if (typeof str !== 'string') return str
+  if (!str.includes('<')) return str
+  return str.replace(STYLE_TAG, '\\3c $2').replace(COMMENT_OPEN, '\\3c $2')
+}
+
 const DEFAULT_RAW = {
   after: '\n',
   beforeClose: '\n',
@@ -38,7 +50,7 @@ class Stringifier {
       this.block(node, name + params)
     } else {
       let end = (node.raws.between || '') + (semicolon ? ';' : '')
-      this.builder(name + params + end, node)
+      this.builder(escapeHTMLInCSS(name + params + end), node)
     }
   }
 
@@ -73,7 +85,7 @@ class Stringifier {
 
   block(node, start) {
     let between = this.raw(node, 'between', 'beforeOpen')
-    this.builder(start + between + '{', node, 'start')
+    this.builder(escapeHTMLInCSS(start + between) + '{', node, 'start')
 
     let after
     if (node.nodes && node.nodes.length) {
@@ -83,7 +95,7 @@ class Stringifier {
       after = this.raw(node, 'after', 'emptyBody')
     }
 
-    if (after) this.builder(after)
+    if (after) this.builder(escapeHTMLInCSS(after))
     this.builder('}', node, 'end')
   }
 
@@ -95,10 +107,11 @@ class Stringifier {
     }
 
     let semicolon = this.raw(node, 'semicolon')
+    let isDocument = node.type === 'document'
     for (let i = 0; i < node.nodes.length; i++) {
       let child = node.nodes[i]
       let before = this.raw(child, 'before')
-      if (before) this.builder(before)
+      if (before) this.builder(isDocument ? before : escapeHTMLInCSS(before))
       this.stringify(child, last !== i || semicolon)
     }
   }
@@ -106,7 +119,7 @@ class Stringifier {
   comment(node) {
     let left = this.raw(node, 'left', 'commentLeft')
     let right = this.raw(node, 'right', 'commentRight')
-    this.builder('/*' + left + node.text + right + '*/', node)
+    this.builder(escapeHTMLInCSS('/*' + left + node.text + right + '*/'), node)
   }
 
   decl(node, semicolon) {
@@ -118,7 +131,7 @@ class Stringifier {
     }
 
     if (semicolon) string += ';'
-    this.builder(string, node)
+    this.builder(escapeHTMLInCSS(string), node)
   }
 
   document(node) {
@@ -324,13 +337,17 @@ class Stringifier {
 
   root(node) {
     this.body(node)
-    if (node.raws.after) this.builder(node.raws.after)
+    if (node.raws.after) {
+      let after = node.raws.after
+      let isDocument = node.parent && node.parent.type === 'document'
+      this.builder(isDocument ? after : escapeHTMLInCSS(after))
+    }
   }
 
   rule(node) {
     this.block(node, this.rawValue(node, 'selector'))
     if (node.raws.ownSemicolon) {
-      this.builder(node.raws.ownSemicolon, node, 'end')
+      this.builder(escapeHTMLInCSS(node.raws.ownSemicolon), node, 'end')
     }
   }
 

package/lib/stringify.d.ts

@@ -4,6 +4,6 @@ interface Stringify extends Stringifier {
   default: Stringify
 }
 
-declare const stringify: Stringify
+declare let stringify: Stringify
 
 export = stringify

package/lib/warning.d.ts

@@ -40,7 +40,6 @@ declare namespace Warning {
     word?: string
   }
 
-   
   export { Warning_ as default }
 }
 

package/package.json

@@ -1,10 +1,48 @@
 {
   "name": "postcss",
-  "version": "8.5.8",
+  "version": "8.5.10",
   "description": "Tool for transforming styles with JS plugins",
-  "engines": {
-    "node": "^10 || ^12 || >=14"
+  "keywords": [
+    "css",
+    "manipulation",
+    "parser",
+    "postcss",
+    "preprocessor",
+    "rework",
+    "source map",
+    "transform",
+    "transpiler"
+  ],
+  "homepage": "https://postcss.org/",
+  "bugs": {
+    "url": "https://github.com/postcss/postcss/issues"
   },
+  "license": "MIT",
+  "author": "Andrey Sitnik <andrey@sitnik.es>",
+  "repository": "postcss/postcss",
+  "funding": [
+    {
+      "type": "opencollective",
+      "url": "https://opencollective.com/postcss/"
+    },
+    {
+      "type": "tidelift",
+      "url": "https://tidelift.com/funding/github/npm/postcss"
+    },
+    {
+      "type": "github",
+      "url": "https://github.com/sponsors/ai"
+    }
+  ],
+  "main": "./lib/postcss.js",
+  "browser": {
+    "./lib/terminal-highlight": false,
+    "source-map-js": false,
+    "path": false,
+    "url": false,
+    "fs": false
+  },
+  "types": "./lib/postcss.d.ts",
   "exports": {
     ".": {
       "import": "./lib/postcss.mjs",
@@ -39,50 +77,12 @@
     "./lib/warning": "./lib/warning.js",
     "./package.json": "./package.json"
   },
-  "main": "./lib/postcss.js",
-  "types": "./lib/postcss.d.ts",
-  "keywords": [
-    "css",
-    "postcss",
-    "rework",
-    "preprocessor",
-    "parser",
-    "source map",
-    "transform",
-    "manipulation",
-    "transpiler"
-  ],
-  "funding": [
-    {
-      "type": "opencollective",
-      "url": "https://opencollective.com/postcss/"
-    },
-    {
-      "type": "tidelift",
-      "url": "https://tidelift.com/funding/github/npm/postcss"
-    },
-    {
-      "type": "github",
-      "url": "https://github.com/sponsors/ai"
-    }
-  ],
-  "author": "Andrey Sitnik <andrey@sitnik.ru>",
-  "license": "MIT",
-  "homepage": "https://postcss.org/",
-  "repository": "postcss/postcss",
-  "bugs": {
-    "url": "https://github.com/postcss/postcss/issues"
-  },
   "dependencies": {
     "nanoid": "^3.3.11",
     "picocolors": "^1.1.1",
     "source-map-js": "^1.2.1"
   },
-  "browser": {
-    "./lib/terminal-highlight": false,
-    "source-map-js": false,
-    "path": false,
-    "url": false,
-    "fs": false
+  "engines": {
+    "node": "^10 || ^12 || >=14"
   }
 }