sax 1.4.2 → 1.4.4

package/lib/sax.js

@@ -263,10 +263,9 @@
       Buffer.isBuffer(data)
     ) {
       if (!this._decoder) {
-        var SD = require('string_decoder').StringDecoder
-        this._decoder = new SD('utf8')
+        this._decoder = new TextDecoder('utf8')
       }
-      data = this._decoder.write(data)
+      data = this._decoder.decode(data, { stream: true })
     }
 
     this._parser.write(data.toString())
@@ -278,6 +277,14 @@
     if (chunk && chunk.length) {
       this.write(chunk)
     }
+    // Flush any remaining decoded data from the TextDecoder
+    if (this._decoder) {
+      var remaining = this._decoder.decode()
+      if (remaining) {
+        this._parser.write(remaining)
+        this.emit('data', remaining)
+      }
+    }
     this._parser.end()
     return true
   }
@@ -780,7 +787,7 @@
               XML_NAMESPACE +
               '\n' +
               'Actual: ' +
-              parser.attribValue,
+              parser.attribValue
           )
         } else if (
           local === 'xmlns' &&
@@ -792,7 +799,7 @@
               XMLNS_NAMESPACE +
               '\n' +
               'Actual: ' +
-              parser.attribValue,
+              parser.attribValue
           )
         } else {
           var tag = parser.tag
@@ -834,7 +841,7 @@
       if (tag.prefix && !tag.uri) {
         strictFail(
           parser,
-          'Unbound namespace prefix: ' + JSON.stringify(parser.tagName),
+          'Unbound namespace prefix: ' + JSON.stringify(parser.tagName)
         )
         tag.uri = qn.prefix
       }
@@ -873,7 +880,7 @@
         if (prefix && prefix !== 'xmlns' && !uri) {
           strictFail(
             parser,
-            'Unbound namespace prefix: ' + JSON.stringify(prefix),
+            'Unbound namespace prefix: ' + JSON.stringify(prefix)
           )
           a.uri = prefix
         }
@@ -999,7 +1006,12 @@
       }
     }
     entity = entity.replace(/^0+/, '')
-    if (isNaN(num) || numStr.toLowerCase() !== entity) {
+    if (
+      isNaN(num) ||
+      numStr.toLowerCase() !== entity ||
+      num < 0 ||
+      num > 0x10ffff
+    ) {
       strictFail(parser, 'Invalid character entity')
       return '&' + parser.entity + ';'
     }
@@ -1036,7 +1048,7 @@
     if (parser.closed) {
       return error(
         parser,
-        'Cannot write after close. Assign an onready handler.',
+        'Cannot write after close. Assign an onready handler.'
       )
     }
     if (chunk === null) {
@@ -1188,7 +1200,7 @@
             if (parser.doctype || parser.sawRoot) {
               strictFail(
                 parser,
-                'Inappropriately located doctype declaration',
+                'Inappropriately located doctype declaration'
               )
             }
             parser.doctype = ''
@@ -1401,7 +1413,7 @@
           } else {
             strictFail(
               parser,
-              'Forward-slash in opening tag not followed by >',
+              'Forward-slash in opening tag not followed by >'
             )
             parser.state = S.ATTRIB
           }
@@ -1549,7 +1561,7 @@
           } else if (isMatch(nameBody, c)) {
             parser.tagName += c
           } else if (parser.script) {
-            parser.script += '</' + parser.tagName
+            parser.script += '</' + parser.tagName + c
             parser.tagName = ''
             parser.state = S.SCRIPT
           } else {

package/package.json

@@ -2,7 +2,7 @@
   "name": "sax",
   "description": "An evented streaming XML parser in JavaScript",
   "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
-  "version": "1.4.2",
+  "version": "1.4.4",
   "main": "lib/sax.js",
   "license": "BlueOak-1.0.0",
   "scripts": {
@@ -24,5 +24,8 @@
   },
   "tap": {
     "allow-incomplete-coverage": true
+  },
+  "engines": {
+    "node": ">=11.0.0"
   }
 }