Techini / vulnado

Purposely vulnerable Java application to help lead secure coding workshops
Apache License 2.0
0 stars 0 forks source link

Bump jsoup from 1.8.3 to 1.12.2 #20

Closed dependabot-preview[bot] closed 4 years ago

dependabot-preview[bot] commented 4 years ago

Bumps jsoup from 1.8.3 to 1.12.2.

Changelog

Sourced from jsoup's changelog.

jsoup changelog

*** Release 1.13.1 [PENDING]

  • Improvement: memory optimizations, reducing the retained size of a Document by ~ 39%, and allocations by ~ 9%:

    1. Attributes holder in Elements is only created if the element has attributes
    2. Only track the baseUri in an element when it is set via DOM to a new value for a given tree
    3. After parsing, do not retain the input character reader (and associated buffers) in the Document#parser
  • Improvement: when pretty-printing, comments in inline tags are not pushed to a newline

  • Improvement: added Attributes#hasDeclaredValueForKey(key) and Attribute#hasDeclaredValueForKeyIgnoreCase(), to check if an attribute is set but has no value. Useful in place of the deprecated and removed BooleanAttribute class and instanceof test.

  • Improvement: removed old methods and classes that were marked deprecated in previous releases.

  • Bugfix: in a