sverweij / state-machine-cat

write beautiful state charts :scream_cat:
https://state-machine-cat.js.org
MIT License
802 stars 45 forks source link

bump fast-xml-parser to >=4.1.2 #177

Closed sverweij closed 1 year ago

sverweij commented 1 year ago

fast-xml-parser needs to be bumped to latest because older versions have some sort of security vulnerability in them (which I'm not entirely sure would be exploitable in state-machine-cat, but better to be safe than sorry).

I've migrated the SCXML parser to use the patched version of fast-xml-parser (see branch ), but haven't tamed fast-xml-parser's behaviour to be 100% backwards compatible yet - as witnessed by ~6~ 4 failing unit tests in the corpus (of 904 in total, and 77 scxml parser specific ones).

So: it has my attention, but still needs some TLC (and a slot of quiet spare time).